BOB Staking security review

Pashov Audit Group21 Oct 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed BOB Onramp (BOB Staking security review) on 21 Oct 2025: 20 findings, 2 critical; 12 marked fixed, 8 acknowledged.

2 critical findings, fixed

Open the report Open BOB Onramp’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings20

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	0	0	2
Medium	0	1	2
Low	0	7	6

CriticalinstantWithdraw() does not transfer _amountForContract , locking tokensFixed

The report gives no description here.

CriticalStakes not forwarded post-delegation, positions unwithdrawableFixed

The report gives no description here.

HighBonuses obtainable without proper locking due to flawed lock periodFixed

The report gives no description here.

HighDelegating to address(0) empties contract via alterGovernanceDelegatee()Fixed

The report gives no description here.

MediumCondition setter functions are brokenFixed

The report gives no description here.

MediumDoS of staking due to unguarded receiver lock periodFixed

The report gives no description here.

LowAnyone can trigger others' claims causing front- running reward lossFixed

The report gives no description here.

LowMissing validation allows bonusEndTime to be set to past timestampsFixed

The report gives no description here.

LowResidual recycling lets attackers farm wrapper bonus without new capitalFixed

The report gives no description here.

LowTIME_UNIT is not exactly one yearFixed

The report gives no description here.

Show 2 more

LowUnguarded claimRewards() can be leveraged to deny Instant withdrawal feesFixed

The report gives no description here.

LowUsers cannot opt out of hybrid node delegationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of BOB Onramp’s security record

BOB Onramp

Audits4 audits by 1 firmLast audit Oct 2025, by Pashov Audit Group.

Critical findingsNo open critical findingsAcross the 4 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open BOB Onramp’s security record

Security firm

Pashov Audit Group

86 projects reviewed · 165 reports · latest Aug 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.