VenomStake / LiquidStaking

HackenFiles named in the report

Audit

Hacken reviewed Venom Foundation (VenomStake / LiquidStaking) on 26 Sep 2023: 57 findings, 2 critical; 52 marked fixed, 5 open.

2 critical findings, fixed
Open the reportOpen Venom Foundation’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings57

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High004
Medium0013
Low5033
CriticalTransaction Replay AttackFixed

The report gives no description here.

CriticalTransaction Replay AttackFixed

The report gives no description here.

HighData ConsistencyFixed

The report gives no description here.

HighIncorrect Function UsedFixed

The report gives no description here.

HighIncorrect Gas ManagementFixed

The report gives no description here.

HighLack of ValidationFixed

The report gives no description here.

MediumDenial of ServiceFixed

The report gives no description here.

MediumDivision By ZeroFixed

The report gives no description here.

MediumImplementation ErrorFixed

The report gives no description here.

MediumInconsistent Ownership ControlFixed

The report gives no description here.

Show 10 more
MediumIncorrect Gas ManagementFixed

The report gives no description here.

MediumIncorrect Gas ManagementFixed

The report gives no description here.

MediumInvalid ValidationFixed

The report gives no description here.

MediumInvalid ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

MediumMissing ValidationFixed

The report gives no description here.

MediumRace ConditionFixed

The report gives no description here.

LowCode ConsistencyFixed

The report gives no description here.

Show 10 more
LowCode ConsistencyFixed

The report gives no description here.

LowDuplicate Field in Return ObjectFixed

The report gives no description here.

LowFunds LockFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowIncorrect Gas ManagementFixed

The report gives no description here.

LowMagic Numbers UsageFixed

The report gives no description here.

Show 10 more
LowMagic Numbers UsageFixed

The report gives no description here.

LowMissing Error CodeFixed

The report gives no description here.

LowMissing NatSpecFixed

The report gives no description here.

LowMissing ValidationFixed

The report gives no description here.

LowMissing ValidationFixed

The report gives no description here.

LowMissing ValidationFixed

The report gives no description here.

LowOutdated Compiler VersionFixed

The report gives no description here.

LowPotential UnderflowFixed

The report gives no description here.

LowPotential UnderflowFixed

The report gives no description here.

LowRedundant Code BlockFixed

The report gives no description here.

Show 10 more
LowRedundant Constant VariableFixed

The report gives no description here.

LowRedundant Event DeclarationFixed

The report gives no description here.

LowRedundant Function DeclarationFixed

The report gives no description here.

LowRedundant ImportsFixed

The report gives no description here.

LowRedundant ModifierFixed

The report gives no description here.

LowRedundant State Change and Event EmissionFixed

The report gives no description here.

LowRedundant Use Of ModifierFixed

The report gives no description here.

LowStorage Variable ShadowingFixed

The report gives no description here.

LowStyle Guide ViolationFixed

The report gives no description here.

LowTesting Functions in Production InterfaceFixed

The report gives no description here.

Show 2 more
LowTODO CommentFixed

The report gives no description here.

LowTypographical ErrorFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (26)

  • contracts/base/StEverVaultStorage.tsol
  • contracts/interfaces/IStEverCluster.tsol
  • contracts/interfaces/IStEverVault.tsol
  • contracts/Platform.tsol
  • contracts/Wallet.tsol
  • contracts/interfaces/IDePoolStrategy.tsol
  • contracts/StEverCluster.tsol
  • contracts/interfaces/IDePool.tsol
  • contracts/DepoolStrategyFactory.tsol
  • contracts/StEverVault.tsol
  • contracts/base/StEverStrategiesManager.tsol
  • contracts/interfaces/IDepoolStrategyFactory.tsol
  • contracts/base/StEverVaultStrategiesController.tsol
  • contracts/interfaces/IParticipant.tsol
  • contracts/StEverAccount.tsol
  • contracts/utils/Utils.tsol
  • contracts/base/StEverVaultValidators.tsol
  • contracts/utils/ErrorCodes.tsol
  • contracts/utils/Gas.tsol
  • contracts/base/StEverVaultBase.tsol
  • contracts/interfaces/IStEverAccount.tsol
  • contracts/utils/Constants.tsol
  • contracts/StrategyDePool.tsol
  • contracts/utils/ClusterLib.tsol
  • contracts/base/StEverVaultEmergency.tsol
  • contracts/interfaces/IStrategy.tsol

Part of Venom Foundation’s security record

Venom Foundation
Audits3 audits by 1 firmLast audit Nov 2023, by Hacken.
Critical findingsNo open critical findingsAcross the 3 reports, 4 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Venom Foundation’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us