WStaking (Whale Venture)
CredShields reviewed WStaking (Whale Venture) on 20 Mar 2026: 12 findings, 1 critical; 10 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings16
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 1 |
| Medium | 0 | 1 | 2 |
| Low | 0 | 0 | 6 |
CriticalAny User Can Access Developer-Only 10,000% APR Via Unguarded Fallback Branches in _getAPRRange()Fixed
The report gives no description here.
HighAttacker Can Bypass All Unstake Penalties By Channeling Funds Through Auto-Renewed StakesFixed
The report gives no description here.
MediumMissing systemNotDisabled Modifier on addFund()Fixed
The report gives no description here.
MediumOwner Cannot Pause Contract During EmergencyFixed
The report gives no description here.
LowAdministrators Cannot Rotate Hot Wallet Keys Without Full Proxy UpgradeFixed
The report gives no description here.
LowFloating and Outdated PragmaFixed
The report gives no description here.
LowFull Unstake Leaves Residual Rewards Phantom-Locked In Global Ungranted CountersFixed
The report gives no description here.
LowOwner Can Permanently Brick Protocol Via Single-Step Ownership TransferFixed
The report gives no description here.
LowOwner Can Silently Brick Existing Promo Stakes By Starting A New PromotionFixed
The report gives no description here.
LowUsers Lose Gas On Silently Failed Core Operations Due To Missing RevertsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of WStaking (Whale Venture)’s security record
WStaking (Whale Venture)Security firm
CredShields45 projects reviewed · 58 reports · latest Oct 2026
See CredShields’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us