Starter Smart Contract Review
Audit · firm’s term: smart contract review
Zokyo reviewed Starter.xyz (Starter Smart Contract Review) on 26 Jun 2024: 14 findings, 1 critical; 11 marked fixed, 3 open.
Trustblock does not review code.
Findings14
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 0 | 3 |
| Low | 3 | 0 | 4 |
CriticalOut of range index in getTokenBurnFee() causes function reversion after 14 daysFixed
The report gives no description here.
HighAn attacker can create many small deposits on behalf of the victim using just dust amountFixed
The report gives no description here.
HighReentrance vulnerability in processRewards() and updateStakeLock() FunctionsFixed
The report gives no description here.
HighReentrancy Guard Conflict in _processVaultRewards Private FunctionFixed
The report gives no description here.
MediumRounding Issue While Calculating liquidPercentageFixed
The report gives no description here.
MediumStaker Can Extend Expired LocksFixed
The report gives no description here.
MediumvaultRewardsPerWeight Should Be Updated When _processVaultRewards()Fixed
The report gives no description here.
LowLocation: PoolBase.solFixed
The report gives no description here.
LowMissing Deposit ID Emission on New DepositFixed
The report gives no description here.
LowRedundant Initialization of VariablesFixed
The report gives no description here.
Show 1 more
LowUse of require Statements Instead of Modifiers for Access ControlFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
- CorePool.sol
- PoolBase.sol
Part of Starter.xyz’s security record
Starter.xyzSecurity firm
Zokyo89 projects reviewed · 131 reports · latest Feb 2025
See Zokyo’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us