Galileo Protocol / GalileoStaking
Hacken reviewed Galileo (Galileo Protocol / GalileoStaking) on 30 Oct 2024: 18 findings, 2 critical; 14 marked fixed, 4 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings18
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 1 |
| High | 0 | 0 | 4 |
| Medium | 0 | 0 | 1 |
| Low | 3 | 0 | 8 |
CriticalMissing Reward Updates in unstake Function Results in Incorrect Reward CalculationsFixed
The report gives no description here.
HighconfigurePool Resets State and Causes Incorrect Reward CalculationsFixed
The report gives no description here.
HighLack of Dedicated Reward Pool Tracking Allows Reward Drainage from Other StakersFixed
The report gives no description here.
HighLack of End Time Validation in rewardPerToken Function Leads to Over-Accumulation of RewardsFixed
The report gives no description here.
HighUnstaking Function Does Not Enforce Staking Lock PeriodFixed
The report gives no description here.
MediumLack of Emergency Withdrawal MechanismFixed
The report gives no description here.
LowImproper Handling of ERC-20 and ERC-721 Transfers Using Low-Level CallsFixed
The report gives no description here.
LowLack of Consistency Check for Staking Parameters in configureNewCollection Allows Incorrect Hierarchical Reward StructureFixed
The report gives no description here.
LowLack of Proper Event Indexing and Missing Events Limits Off-Chain Monitoring and TrackingFixed
The report gives no description here.
LowModifier Use for State Updates Lowers Code MaintainabilityFixed
The report gives no description here.
Show 4 more
LowOverlapping Reward Windows Create Inconsistencies in the Staking SystemFixed
The report gives no description here.
LowRedundant Reward Calculation in withdrawAllRewards Leads to High Gas Costs and Potential DoSFixed
The report gives no description here.
LowRedundant State Variables and Unnecessary Assignments in updateEmissionRateFixed
The report gives no description here.
LowUnbounded Tax Rate in configurePool Allows Arbitrary Reward ManipulationFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0xa444ec96ee01bb219a44b285de47bf33c3447ad5 | Chain: Ethereum | Source code: Verified source |
Part of Galileo’s security record
Security firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us