Zilliqa / Delegated Staking

Hacken1 address on BNB Chain

Hacken reviewed Zilliqa (Zilliqa / Delegated Staking) on 4 Apr 2025: 13 findings, 0 critical; 11 marked fixed, 2 open.

No open critical findings
Open the reportOpen Zilliqa’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium103
Low108
MediumMissing New Address Staking Data Check for replaceOldAddress functionFixed

The report gives no description here.

MediumPotential Denial of Service due to Iteration Over All Validators During Deposits UpdatesFixed

The report gives no description here.

MediumUnauthorized Reinitialization Permits Arbitrary State MigrationFixed

The report gives no description here.

LowCentralized Control Address SettingFixed

The report gives no description here.

LowCommission Rate Configuration Allows Excessively High RatesFixed

The report gives no description here.

LowFloating PragmaFixed

The report gives no description here.

LowIncorrect Comments in Function for Version Change in BaseDelegation ContractFixed

The report gives no description here.

LowInefficient Handling of Zero-Amount Stakings in Reward CalculationFixed

The report gives no description here.

LowLack of Events In DelegationsFixed

The report gives no description here.

LowMissing Non-Zero Address ValidationsFixed

The report gives no description here.

Show 1 more
LowRedundant State Change in Activation Flag Results in Unnecessary Gas UsageFixed

The report gives no description here.

Contracts in scope1

AddressChainSource code
0xb86abcb37c3a4b64f74f59301aff131a1becc787Chain: BNB ChainSource code: Verified source

Part of Zilliqa’s security record

Zilliqa
Audits3 audits by 2 firmsLast audit Sep 2026, by Hacken.
Critical findingsNo open critical findingsAcross 3 reports.
Open Zilliqa’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us