The Rig Updates audit
Oak Security reviewed The Rig (The Rig Updates audit) on 1 Oct 2025: 14 findings, 0 critical; 12 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 12 |
LowBalance increase check ordering can be improvedFixed
The report gives no description here.
LowEvent emission flaw leading to a misleading deposited amount in claimFixed
The report gives no description here.
LowIncorrect stFUEL to FUEL ratio calculationFixed
The report gives no description here.
LowMinimum withdrawal check incorrectly compares stFUEL with FUEL amountFixed
The report gives no description here.
LowMisleading fee configuration comment may cause incorrect assumptionsFixed
The report gives no description here.
LowMissing initialization check in process_message may allow execution in an uninitialized stateFixed
The report gives no description here.
LowMissing supply reduction on burns causes inflated total_supply trackingFixed
The report gives no description here.
LowMissing validation allows zero-value withdrawalsFixed
The report gives no description here.
LowMissing validation for fuel_unbondedFixed
The report gives no description here.
LowRedundant minimum received check can be avoidedFixed
The report gives no description here.
Show 2 more
LowThe full amount of FUEL to be staked cannot be withdrawn to L1Fixed
The report gives no description here.
LowValidation order can be improved to prevent wasted executionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of The Rig’s security record
The RigSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us