Lisk Governance, Staking, Reward, Vesting, and Air

Trail of Bits28 May 2024Code version: not recorded (see the report)

Audit · firm’s term: Security Assessment

Trail of Bits reviewed Lisk (Lisk Governance, Staking, Reward, Vesting, and Air) on 28 May 2024: 5 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Lisk’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	2
Low	0	0	3

Marked Informational by the firm. Not counted as findings.

InformationalPotential for huge gas consumption in updateGlobalState and calculateRewardsOpen

The report gives no description here.

InformationalUse of outdated librariesOpen

The report gives no description here.

InformationalDocker Compose ports exposed on all interfacesFixed

The report gives no description here.

InformationalInsufficient event generationFixed

The report gives no description here.

InformationalStack traces in Express are not disabledFixed

The report gives no description here.

InformationalSynchronous function calls inside asynchronous functionsFixed

The report gives no description here.

InformationalUsers are charged a larger penalty for fast unlocks than necessaryFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Lisk’s security record

Lisk

Audits4 audits by 2 firmsLast audit Aug 2024, by HashEx.

Critical findingsNo open critical findingsAcross 4 reports.

Open Lisk’s security record

Security firm

Trail of Bits

29 projects reviewed · 47 reports · latest Sep 2026

See Trail of Bits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.