BENQI security record
As of 21 Oct 2026, BENQI has 3 audit reports by 1 security firm on Trustblock; the latest is by Cyfrin, dated 10 Nov 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| BENQI Governance Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Benqi Collateral Migrator Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| BENQI Ignite Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Original removed |
Findings26
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 5 |
| Low | 0 | 10 | 10 |
Marked Gas or Informational by the firms. Not counted as findings.
GasAction count increment in BenqiEcosystemModule::_buildActions can be simplifiedBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Acknowledged
The report gives no description here.
Open the reportGasAvoid initializing variables to default valuesBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Acknowledged
The report gives no description here.
Open the reportGasAvoid return statements with named return variablesBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalUnsafe transfer of non-standard ERC-20 tokensBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalVotes will continue to be automatically recast for deactivated gauges if prior voters do not resetBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalInconsistent price validation in Ignite::registerWithStakeBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalIncorrect assumption that Chainlink price feeds will always have the same decimalsBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalMagic numbers should be replaced by constant variablesBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalMisalignment of pause() and unpause() access controls across contractsBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalPlaceholder recipient constants in Ignite should be updated before deploymentBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalStaking amount in QI should be calculated differentlyBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalTokens with more than 18 decimals will not be supportedBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportInformationalUnnecessary amount parameter in StakingContract::stakeWithERC20BENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportGasUnnecessary validation in StakingContract::registerNodeBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Acknowledged
The report gives no description here.
Open the reportGasDuplicated validation in DistributionManager::initialize can be removedBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalMIN_SPEED and DEFAULT_MIN_SPEED should be merged into a shared constants libraryBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalSpeed calculation precision handling is ineffectiveBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Fixed
The report gives no description here.
Open the reportGasSpeedCalculator::calcSpeed should return early if _moduleBudget is zeroBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalUniquenessTests incorrectly refers to the caller being included in the call identifier computationBENQI Governance Audit Report · Cyfrin · 10 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalNatSpec @custom:reverts inconsistenciesBenqi Collateral Migrator Audit Report · Cyfrin · 6 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalUnused importsBenqi Collateral Migrator Audit Report · Cyfrin · 6 Apr 2025Fixed
The report gives no description here.
Open the reportInformationalAccessControlUpgradeable::_setupRole is deprecatedBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalIncorrect revert strings in StakingContract::revokeAdminRoleBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalMissing modifiersBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalMissing onlyInitializing modifier in StakingContractBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalTypo in Ignite::registerWithPrevalidatedQiStake NatSpecBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportInformationalUnchained initializers should be called insteadBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportGasUnnecessary conditional block in Ignite::getTotalRegistrations can removedBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportGasUnnecessary price feed address validation in Ignite::configurePriceFeedBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportGasUnnecessary validation in Ignite::getRegistrationsByAccountBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportShow 1 more
GasUnnecessary validation of EnumerableSet functionsBENQI Ignite Audit Report · Cyfrin · 11 Dec 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="benqi"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us