Persistence Stkbnb security review
Hexens reviewed Persistence (Persistence Stkbnb security review) on 12 Apr 2024: 16 findings, 1 critical; all marked fixed.
Report hosted on GitHub.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 7 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 6 |
CriticalIncorrectly using the shares of the destination validator as the input for the _STAKE_HUB.redelegate() functionFixed
The report gives no description here.
HighBroken validator creation logicFixed
The report gives no description here.
HighIncorrect usage of shares instead of stakes occurs when calling the ValidatorSet._redelegate functionFixed
The report gives no description here.
HighIncorrect value of exchangeRate.totalWei due to redelegation feesFixed
The report gives no description here.
HighIndex out of bounds error in function StakePool._getDailyReward()Fixed
The report gives no description here.
HighThe StakePool.initiateRedelegation() function does not factor in the redelegation feeFixed
The report gives no description here.
HighThe totalWei is inflated due to the presence of duplicated validator addressesFixed
The report gives no description here.
HighUtilization of outdated validator stakes during redelegationFixed
The report gives no description here.
MediumUnable to execute StakePool.epochUpdate() because of the mismatch between shares and stakes of a validatorFixed
The report gives no description here.
MediumUnable to initiate unbonding due to an underflow error with the weightage variableFixed
The report gives no description here.
Show 6 more
LowDeposits can temporarily stuck in DelegationManager contractFixed
The report gives no description here.
LowFunction _isActiveValidator() does not check the state of StakeHub contractFixed
The report gives no description here.
LowLack of testsFixed
The report gives no description here.
LowSelfdestruct is deprecated after the Kepler hardforkFixed
The report gives no description here.
LowUnnecessary if statement in the DelegationManager.delegateDep ositedBNB() functionFixed
The report gives no description here.
LowValidator status is not checked in the initiateDelegation() functionFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Persistence’s security record
PersistenceSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us