NodeOps Network audit
Audit · firm’s term: security audit
Oak Security reviewed NodeOps (NodeOps Network audit) on 25 Jun 2025: 19 findings, 2 critical; 16 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 10 |
CriticalFlawed time-based minting schedule permits excessive mintingFixed
The report gives no description here.
HighNodeVesting will indicate an invalid available balance when vesting schedules get revokedFixed
The report gives no description here.
HighRe-staking resets the lock period, leading to unfair lock extensionsFixed
The report gives no description here.
HighUsers should be able to unstake if a pool is deactivatedFixed
The report gives no description here.
HighUsing distributeEmissions in StakingV2 could lead to stuck rewardsFixed
The report gives no description here.
HighUtilizing mintBuffer could lead to wrong NODE amounts being mintedFixed
The report gives no description here.
LowclaimAllRewards in StakingV2 will revert if the user has unstaked all tokens beforehandFixed
The report gives no description here.
LowFirst token mint could end up locking the minting functionality for MIN_MINT_INTERVAL, without actually minting anythingFixed
The report gives no description here.
LowGlobal rate limiting per address blocks independent vesting schedule releasesFixed
The report gives no description here.
LowImproper scaling in rewardPerTokenStored enables reward calculation anomaliesFixed
The report gives no description here.
Show 6 more
LowLack of input validation in setOffchainRecipient enables misconfigurationFixed
The report gives no description here.
LowMissing initialization of offchainRecipient leads to potential token lossFixed
The report gives no description here.
LowMissing input validation in initialize functionsFixed
The report gives no description here.
LowThe mint buffer in NODE cannot be properly utilizedFixed
The report gives no description here.
LowThe StakingV2 contract will accumulate dust amountsFixed
The report gives no description here.
LowUnbounded iteration could disable RPC callsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of NodeOps’s security record
NodeOpsSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us