Chiliz Chain
Resonance Security reviewed Chiliz (Chiliz Chain) on 20 Aug 2025: 14 findings, 0 critical; 13 marked fixed, 1 open.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 11 |
HighCooldown For Stakes Can Be Bypassed Or IncreasedOpen
The protocol adds a feature where tokens can have different cooldown periods. This may mean that in some cases, users can bypass this period by swapping tokens.It is possible that the new token will have a lower cooldown than the old token, thus allowing previously unstaked tokens to have a shorter cooldown period.These are the steps to replicate this issue:Stake old tokens (asuming 1000 seconds of locking period).Wait less time than unstakePeriodPerToken of the old token and unstake them.Swap tokens.The lock time for your position has decreased depending on the unstakePeriodPerToken of the new token. For example, if this value is 1 second, then the remaining time is bypassed.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (5)
- src/interfaces/IFTSwapEvents.sol
- src/interfaces/IMintableFT.sol
- src/FTSwap.sol
- src/interfaces/IFTSwap.sol
- src/Staking3.sol
Part of Chiliz’s security record
ChilizSecurity firm
Resonance Security18 projects reviewed · 25 reports · latest Aug 2025
See Resonance Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us