EclipseFi

Resonance Security2 Oct 2024Repository, no commit named

Audit

Resonance Security reviewed EclipseFi on 2 Oct 2024: 6 findings, 0 critical; 3 marked fixed, 3 open.

No open critical findings

Open the report Open EclipseFi’s security record

Report stored on IPFS. Content hash QmeyHfBvp1G5j8mUh2JQR2kmhyeU1Xn3dnC6xEKE4nPj6E

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	2	0
Low	1	3

LowLack of Two-Step Admin Ownership Accept in lp_staking ContractFixed

The lp_staking contract lacks a two-step ownership transfer acceptance mechanism. Currently, ownership of the contract can be transferred in a single transaction without requiring acceptance or verification from the new owner. This practice introduces operational risks and potential vulnerabilities.

LowLack of Two-Step Admin Ownership Accept in single_side_staking contractFixed

The single_side_staking contract lacks a two-step ownership transfer acceptance mechanism. Currently, ownership of the contract can be transferred in a single transaction without requiring acceptance or verification from the new owner. This practice introduces operational risks and potential vulnerabilities.

LowPresence of unused commented-out code in the codebaseFixed

The codebase contains sections of commented-out code, which are not actively contributing to the functionality of the system. These comments include blocks of code that were likely used during development or testing but were never removed from the final version. While not executed, this code still remains within the repository, serving no functional purpose.