HeyElsa - Staking Contract V2
CredShields reviewed HeyElsa (OFT bridge) (HeyElsa - Staking Contract V2) on 17 Apr 2026: 11 findings, 0 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 3 |
| Low | 0 | 0 | 5 |
High_snapshotEligibleSupply() Backdates Mid-Week Deposits to the Epoch StartFixed
The report gives no description here.
HigheligibleVeAtT Returns Zero for Historical Queries - Permanent Reward DestructionFixed
The report gives no description here.
HighReward Theft via Withdraw-Relock - Global ve Numerator vs Eligible-Only DenominatorFixed
The report gives no description here.
MediumdepositFor Missing Blacklist Validation Allows Deposits to Restricted AddressesFixed
The report gives no description here.
MediumInconsistent lastPoint.blk Assignment in _checkpointEligible vs _fillPointHistoryFixed
The report gives no description here.
Mediumtx.origin Validation in onlyUserOrWhitelist Will Break Under EIP-7702Fixed
The report gives no description here.
LowclaimFor Allows Unsolicited Reward Claims Without User ConsentFixed
The report gives no description here.
LowclaimPartial Allows Self-Inflicted Permanent Epoch SkippingFixed
The report gives no description here.
LowfreezeEligibilityEnd Has No On-Chain Ordering Enforcement with RewardDistributor InitializationFixed
The report gives no description here.
LowMissing events in important functionsFixed
The report gives no description here.
Show 1 more
LowNo MINTIME Validation in ConstructorFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of HeyElsa (OFT bridge)’s security record
HeyElsa (OFT bridge)Security firm
CredShields45 projects reviewed · 58 reports · latest Oct 2026
See CredShields’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us