As of 3 Nov 2026, Paradox Metaverse has 1 audit report on Trustblock, by CertiK, dated 11 Nov 2022. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Paradox Meta | Security firm: CertiK | Date: | Scope: Files named in the report | 2 critical findings, fixed | Open · skynet.certik.com |
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 1 | 0 |
| Medium | 1 | 0 | 1 |
| Low | 8 | 0 | 5 |
1 billion tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute para tokens without obtaining the consensus of the community.
Open the report33% of the staked para tokens are sent to the `rewardsPoolAddress`.
Open the reportThe variable `cappedExtraDays` is not capped with `LPB_D`.
Open the reportThe purpose of the contract `stakePool` is not clear. The development team should confirm that it is consistent with the original project design. And the financial model of this protocol is not in the scope of this audit.
Open the report`public` functions that are never called by the contract could be declared as `external`. `external` functions are more efficient than `public` functions.
Open the report33% of the staked para tokens are burnt in the function stake(). It isn't aimed to decrease the total supply of para tokens to improve the price, because the reward token is also para token and the contract will return all 100% of the staked para tokens and rewards token. So the total supply of para token will be increased to cover every user's principal and rewards.
Open the reportThe implementation of function `_removeStakeFromList()` will change the order of the list. So it should be noticed that the `stakeId` may get changed.
Open the reportThe payout is composed of the bonus part and the staking part. The bonus part is $actuallyStakedDays/scheduledStakedDAys * Share$. It's confusing that `Share` is not only represent for the user share to participate rewards distribution but also represent for the bonus rewards.
Open the reportThe `virtualPool` can be changed through function `addPool()`. It should not be changed because if the `accParaPerShare` is set to 0, all the reward calculations will be wrong.
Open the reportThe reports name a repository or files. Open a report to see its scope.
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="paradox-metaverse"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us