Highstreet security record

Ethereumhighstreet.market

As of 3 Nov 2026, Highstreet has 2 audit reports by 2 security firms on Trustblock; the latest is by HashEx, dated 28 Sep 2022. Those reports list no open critical findings. It also holds 4 deployed contracts on 1 chain.

Critical findings
No open critical findings
Across 2 reports.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.

Audits2

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Highstreet Token

Audit

Security firm: HashExDate: Scope: 1 address on EthereumNo open critical findingsOpen · IPFS
Audit Report

Audit

Security firm: PaladinDate: Scope: 3 addresses on EthereumNo open critical findingsOpen · paladinsec.co

Findings16

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium000
Low0113
HighGovernance can abuse totalWeight to prevent accumulation and collection of rewards, effectively pausing the contractAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
Highstake is vulnerable to re-entrancy, which allows reward amplification on tokens that allow for reentrancyAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
Low_isYield parameter to _stake is redundantAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
Low_poolToken is passed into getPoolData but not usedAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowEarly return causes update logic to not run if withUpdate was true and could cause issues or break invariantsAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowendBlock can be made immutableAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowLack of constructor validation: _initBlock is not required to be in the futureAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
Lowmsg.sender is unnecessarily cast to address(msg.sender)Audit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowOutdated commentsAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowpoolToken is an IERC20 but is stored as an addressAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
Show 5 more
LowRedundant event parameter _by in PoolWeightUpdatedAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowupdateHighPerBlock will stop working after 365 yearsAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowUsage of assert while require is more adequateAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowWeight calculation biases towards 0 affecting rewards collected by usersAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report
LowWhen governance sets a new weight, pending rewards are retroactively changed to use the new weightAudit Report · Paladin · 10 Dec 2021Fixed

The report gives no description here.

Open the report

Contracts4

AddressChainSource code
Chain: EthereumSource code: Verified source
Chain: EthereumSource code: Verified source
Chain: EthereumSource code: Verified source
Chain: EthereumSource code: Verified source

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="highstreet"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us