Quantstamp has performed a security audit of the OriginTrail `StarfleetStaking` contract and has identified 13 security issues ranging from High to Undetermined risk levels. Additionally, we have found 11 best practice issues, missing comments and a low branch coverage when executing the existing test suite. We recommend addressing all these issues before deploying the smart contract in production. <br><br> **DISCLAIMER:** The TRAC token and the StarTRAC token contracts were not part of this audit. Quantstamp has assumed that both of these tokens strictly adhere to the ERC20 token standard. If this assumption is broken, then other issues might arise. As a user of the `StarfleetStaking` contract we recommend you check if the 2 aforementioned tokens adhere to the ERC20 standard. <br><br> **Update:** Quantstamp has performed a reaudit of the code at commit `79012db` and has marked 9 issues Fixed, 3 issues Mitigated, 1 issue Acknowledged and has found 3 additional issues with IDs from QPS-14 to QSP-16. Additionally, 7 of 11 best practice issues have been fixed and 2 others have been partially fixed. Finally, 12 additional tests have been added to the test suite, which have increased the branch coverage from 65% to 73%.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 4 | 2 | 1 | - | 7 |
Fixed | 7 | 2 | - | - | 9 |
Total | 11 | 4 | 1 | 0 | 16 |
# | File Name |
---|---|
1 | contracts/StarfleetStake.sol |
2 | contracts/mocks/IBridgeCustodian.sol |
3 | contracts/mocks/Suicidal.sol |
4 | contracts/mocks/TracToken.sol |
5 | contracts/Migrations.sol |
6 | contracts/mocks/MultiSigWallet.sol |