Quantstamp reviewed Lendroid Whalestreet on 26 Nov 2020: 9 findings, 0 critical; 8 marked fixed, 1 acknowledged.
Report hosted on certificate.quantstamp.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 1 | 3 |
| Low | 0 | 0 | 2 |
When updating `cachedRewardPerStake` in `updateRewards` modifier, the calculated value might be wrong. As example, if we assume that `updateRewards` was not called between epoch X and Y (X<Y) and where X belongs to a different rewards series than Y, the distributed reward will vary from the expected total reward distribution depending on how far apart are X and Y epochs. This issue is due to how `rewardPerStake` is implemented since `lastUpdateTime` was in a previous series with a higher or lower reward, and where the actual block.timestamp belongs to an ongoing series. The `rewardRate(currentEpoch())` will return the value of the new series and apply it to a period of the previous series distributing more or less reward than expected to the users.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
236 projects reviewed · 332 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us