Klink Finance

CertiKFiles named in the report

CertiK reviewed Klink Finance on 7 Feb 2025: 11 findings, 0 critical; 3 marked fixed, 2 acknowledged, 6 open.

No open critical findings
Open the reportOpen Klink Finance’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High300
Medium021
Low302
MediumPotential Lost Rewards Due to Incorrect Return VaFixed

In the contract’s ` _calculate(from, endTime)` function, the logic iterates through multiple interest rate periods and compounds interest onto the user’s deposit amount. However, the function only returns the final slice of interest instead of the total accrued interest over the entire staking period. ```solidity=510 if (depositTime < endTime) { //final calculation for the remaining time period time = endTime.sub(depositTime); interest = time .mul(amount) .mul(rates[userIndex].newInterestRate) .div(_lockduration.mul(10000)); } return (interest); ``` That single `return interest;` line only returns the interest for the last time slice. It does not include the previously compounded interest amounts and will lead to lost of user reward.

LowEvent Not IndexedFixed

If an event is not indexed in a smart contract, it means that the event's parameters are not tagged with the `indexed` keyword. This has implications for how the event data can be searched and filtered when looking through blockchain logs. Without indexing, the event will still emit the data as part of the transaction log, but users won't be able to query for these events using the parameters. They'll have to retrieve the entire set of logs and manually sift through them to find events with the specific data. This can be less efficient and more time-consuming, especially on a blockchain with a high volume of transactions and events.

LowOutdated Solidity VersionFixed

The provided smart contracts are using outdated and non-recommended versions of the Solidity compiler: ```solidity pragma solidity 0.5.16; ``` Outdated solc version is prone to several disclosed bugs. Using these older compiler versions can introduce security vulnerabilities, limit access to modern language features, and cause incompatibility with current development tools and best practices.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • contracts/Token.sol
  • contracts/Staking.sol

Part of Klink Finance’s security record

Klink Finance
Audits1 audit by 1 firmLast audit Feb 2025, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Klink Finance’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us