Masa - Staking #1
CertiK reviewed Masa (Masa - Staking #1) on 7 May 2024: 7 findings, 1 critical; 6 marked fixed, 1 acknowledged.
Report hosted on skynet.certik.com.
Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 0 | 3 |
HighCentralization Risks in `MasaStaking.sol`Acknowledged
In the contract `MasaStaking` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the diagram below. Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority and disable staking or steal stakers' tokens.  In addition, the `DEFAULT_ADMIN_ROLE` role has privilege over the following new functions: - `setCooldownPeriod`: decides the amount of time between unlocking a stake and claiming the stake and rewards
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (1)
- contracts/MasaStaking.sol
Part of Masa’s security record
Security firm
CertiK1,044 projects reviewed · 1,375 reports · latest May 2025
See CertiK’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us