OSIS

CertiKFiles named in the report

Audit

CertiK reviewed OSIS on 5 Dec 2022: 18 findings, 1 critical; 10 marked fixed, 2 acknowledged, 6 open.

1 critical finding, fixed
Open the reportOpen OSIS’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings18

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High100
Medium022
Low507
MediumMissing Input ValidationAcknowledged

The contract is missing the following checks: - In the function `claim()`, it should be checked that the input `tokenIds` do not contain repeated addresses.

MediumNFT's Can Revert On `Unstake()`Acknowledged

When an NFT is staked, the `saveUserStakedTokenId()` is called for the token. If a user deletes their ID by calling `removeUserStakedTokenId()`, then this will cause a revert. When a token is unstaked, the call will revert at the following: ```Solidity=156 Stake memory staked = vault[tokenId]; ``` This can be avoided by not allowing users to remove staking positions. The user can always call `saveUserStakedTokenId()`, and this will allow them to unstake their NFT.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (4)

  • MetaBadges.sol
  • MBGTokenV1.sol
  • OSISTokenV3.sol
  • MBGStakingV2.sol

Part of OSIS’s security record

OSIS
Audits1 audit by 1 firmLast audit Dec 2022, by CertiK.
Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open OSIS’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us