BENQI Ignite Audit Report
Audit · firm’s term: audit report
Cyfrin reviewed BENQI (BENQI Ignite Audit Report) on 11 Dec 2024: 11 findings, 0 critical; 8 marked fixed, 3 acknowledged.
The original report was removed from its address (seen 18 Oct 2026).
Trustblock does not review code.
Findings11
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 3 | 2 |
Marked Informational or Gas by the firm. Not counted as findings.
InformationalInconsistent price validation in Ignite::registerWithStakeAcknowledged
The report gives no description here.
InformationalIncorrect assumption that Chainlink price feeds will always have the same decimalsAcknowledged
The report gives no description here.
InformationalMagic numbers should be replaced by constant variablesAcknowledged
The report gives no description here.
InformationalMisalignment of pause() and unpause() access controls across contractsAcknowledged
The report gives no description here.
InformationalPlaceholder recipient constants in Ignite should be updated before deploymentAcknowledged
The report gives no description here.
InformationalStaking amount in QI should be calculated differentlyAcknowledged
The report gives no description here.
InformationalTokens with more than 18 decimals will not be supportedAcknowledged
The report gives no description here.
InformationalUnnecessary amount parameter in StakingContract::stakeWithERC20Acknowledged
The report gives no description here.
GasUnnecessary validation in StakingContract::registerNodeAcknowledged
The report gives no description here.
InformationalAccessControlUpgradeable::_setupRole is deprecatedFixed
The report gives no description here.
Show 9 more
InformationalIncorrect revert strings in StakingContract::revokeAdminRoleFixed
The report gives no description here.
InformationalMissing modifiersFixed
The report gives no description here.
InformationalMissing onlyInitializing modifier in StakingContractFixed
The report gives no description here.
InformationalTypo in Ignite::registerWithPrevalidatedQiStake NatSpecFixed
The report gives no description here.
InformationalUnchained initializers should be called insteadFixed
The report gives no description here.
GasUnnecessary conditional block in Ignite::getTotalRegistrations can removedFixed
The report gives no description here.
GasUnnecessary price feed address validation in Ignite::configurePriceFeedFixed
The report gives no description here.
GasUnnecessary validation in Ignite::getRegistrationsByAccountFixed
The report gives no description here.
GasUnnecessary validation of EnumerableSet functionsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of BENQI’s security record
BENQISecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us