NodeOps Network audit
Audit · firm’s term: security audit
Oak Security reviewed NodeOps (NodeOps Network audit) on 25 Jun 2025: 19 findings, 2 critical; 16 marked fixed, 3 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 10 |
Marked Informational by the firm. Not counted as findings.
InformationalgetBurnSplitPercentage will show 0 for burn splits that are lower than 1%Acknowledged
The report gives no description here.
InformationalUnbounded iteration in emission share validation risks DoSAcknowledged
The report gives no description here.
InformationalUnused constantsAcknowledged
The report gives no description here.
InformationalUnused errorsAcknowledged
The report gives no description here.
InformationalUnused imports in StakingV2 and NodeVestingAcknowledged
The report gives no description here.
InformationalUsers can deposit small amounts in RevenueManager to avoid sending funds to the burnPoolAcknowledged
The report gives no description here.
InformationalDefine and use constant variables instead of using literalsFixed
The report gives no description here.
InformationalFor the first deposit in RevenueManager, burnPoolDepositId will be 0, even with no funds sent to the burnPoolFixed
The report gives no description here.
InformationalIncomplete burn event metadataFixed
The report gives no description here.
InformationalInefficient access pattern in _updateUserRewardsFixed
The report gives no description here.
Show 7 more
InformationalUnnecessary calls to setRoleAdmin for specific roles and DEFAULT_ADMIN_ROLEFixed
The report gives no description here.
InformationalUnnecessary if statement in NodeVestingFixed
The report gives no description here.
InformationalUnused structsFixed
The report gives no description here.
InformationalUsage of inefficient loop operationsFixed
The report gives no description here.
InformationalUsage of wide Solidity pragmaFixed
The report gives no description here.
InformationalUse custom errors in AirdropPhase2Fixed
The report gives no description here.
InformationalUse proper scientific notationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of NodeOps’s security record
NodeOpsSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us