Lisk Governance, Staking, Reward, Vesting, and Air

Trail of BitsCode version: not recorded (see the report)

Audit · firm’s term: Security Assessment

Trail of Bits reviewed Lisk (Lisk Governance, Staking, Reward, Vesting, and Air) on 28 May 2024: 5 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Lisk’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium002
Low003
MediumExtending the duration of an expired position can break protocol accountingFixed

The report gives no description here.

MediumMissing certificate validationFixed

The report gives no description here.

LowHard-coded credentialsFixed

The report gives no description here.

LowRemoving L2Reward from allowedCreators will freeze all positions created through the contractFixed

The report gives no description here.

LowUsers can bypass the minimum lock durationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Lisk’s security record

Lisk
Audits4 audits by 2 firmsLast audit Aug 2024, by HashEx.
Critical findingsNo open critical findingsAcross 4 reports.
Open Lisk’s security record

Security firm

Trail of Bits

29 projects reviewed · 47 reports · latest Sep 2026

See Trail of Bits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us