Audit Report - GenesisWLPStaking

Paladin26 Apr 20231 address on Arbitrum

Paladin reviewed WINR Chain (Audit Report - GenesisWLPStaking) on 26 Apr 2023: 12 findings, 0 critical; 9 marked fixed, 2 acknowledged, 1 open.

No open critical findings

Open the report Open WINR Chain’s security record

Report stored on IPFS. Content hash QmWqNgQECsfeazDDpLWHpPpF5SUqTmUsFQPRxvaqQ54YfB

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	5
Medium	0	0	0
Low	1	2	4

HighGovernance risk: Governance can break the contract in multiple ways and take out the underlying tokensFixed

The report gives no description here.

HighIt is possible that the firstBlock value resets after everyone withdraws, restarting reward emissionsFixed

The report gives no description here.

HighPool reward logic is fundamentally flawed resulting in wrong and excessive rewardsFixed

The report gives no description here.

HighrewardPerBlock is incorrectly calculated in fundReward and updateMaxBlockFixed

The report gives no description here.

HighUsers can lose deposits if they deposit a second timeFixed

The report gives no description here.

LowArbitrum L2 block frequency might be quite irregularFixed

The report gives no description here.

LowTypographical errorsFixed

The report gives no description here.

Lowwithdraw does not adhere to checks-effects-interactions which means if harvest were to allow for reentrancy, the WLP balance could be drainedFixed

The report gives no description here.

Lowwithdraw does not reset wlpPerToken which prevents a secondary deposit after withdrawal from accumulating wlp rewardsFixed

The report gives no description here.

Contracts in scope1

Address	Chain	Source code
0xc885b641cb11ce2b38a7c28b79318c4b89cf04f9	Chain: Arbitrum	Source code: Verified source

Part of WINR Chain’s security record

WINR Chain

Audits3 audits by 1 firmLast audit Apr 2023, by Paladin.

Critical findingsNo open critical findingsAcross 3 reports.

IncidentIncident 30 May 2024Source: De.Fi incident database.

Open WINR Chain’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.