Persistence security review

HexensCode version: not recorded (see the report)

Hexens reviewed Persistence (Persistence security review) on 12 Jan 2024: 7 findings, 1 critical; 5 marked fixed, 2 acknowledged.

1 critical finding, fixed
Open the reportOpen Persistence’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High011
Medium001
Low012
CriticalUSER CAN LOCK AND STAKE ARBITRARY AMOUNT OF TOKENS WITHOUT PAYINGFixed

The report gives no description here.

HighDIVISION BY ZERO IN SHARE CONVERSION LEADS TO PANIC AND DENIAL-OF-SERVICEFixed

The report gives no description here.

MediumUNBONDING OF VALIDATORS DOES NOT GIVE PRIORITY TO INACTIVE VALIDATORSFixed

The report gives no description here.

LowWHITELISTED VALIDATOR TARGET WEIGHT IS UNCAPPED AND UNITLESSFixed

The report gives no description here.

LowWHITELISTED VALIDATORS CANNOT BE INACTIVATEDFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Persistence’s security record

Persistence
Audits4 audits by 2 firmsLast audit Apr 2024, by Hexens.
Critical findings2 criticals acknowledged, not fixedReported in 2 reports, the latest by Oak Security, Jan 2024. The team acknowledged both.
Open Persistence’s security record

Security firm

Hexens

32 projects reviewed · 74 reports · latest Jul 2026

See Hexens’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us