Let'S Get Hai New Core Features
Ackee Blockchain Security reviewed HAI • APP (Let'S Get Hai New Core Features) on 25 Apr 2025: 25 findings, 2 critical; 15 marked fixed, 6 acknowledged, 4 open.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 2 | 0 |
| Medium | 1 | 1 | 2 |
| Low | 3 | 3 | 11 |
CriticalUser can claim all rewards, that StakingManager received from RewardPoolFixed
The report gives no description here.
CriticalUser can inflate number of rewards by staking additional amount of rewards right before claiming themFixed
The report gives no description here.
MediumIncorrect reward calculation when reward token is the same as staking tokenFixed
The report gives no description here.
MediumRewardPool._totalStaked variable updates incorrectlyFixed
The report gives no description here.
LowA user can received rewards after withdrawal process has been initiatedFixed
The report gives no description here.
LowCode style inconsistenciesFixed
The report gives no description here.
LowMagic numbersFixed
The report gives no description here.
LowMissing event emission for reward pool token stakingFixed
The report gives no description here.
LowOptimization of function _getPriceValueFixed
The report gives no description here.
LowOracle vault relayers lack non-zero price validationFixed
The report gives no description here.
Show 5 more
LowPotential underflow in math operations leads to unspecified errorsFixed
The report gives no description here.
LowReward calculation state variables not updated in critical functionsFixed
The report gives no description here.
LowStakingToken.burnFrom function does not emit StakingTokenBurn eventFixed
The report gives no description here.
LowUnused errorsFixed
The report gives no description here.
LowUnused functionsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of HAI • APP’s security record
HAI • APPSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us