Starter.xyz security record

Avalanche, BNB Chain, Ethereum, Fantom, Polygon (POS)starter.xyzX

As of 30 Oct 2026, Starter.xyz has 1 audit report on Trustblock, by Zokyo, dated 26 Jun 2024. That report lists no open critical findings.

Critical findings
No open critical findings
In that report, 1 critical finding was reported. It is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits1

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Starter Smart Contract Review

Audit

Security firm: ZokyoDate: Scope: Files named in the report1 critical finding, fixedOpen · IPFS

Findings14

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical001
High003
Medium003
Low304
CriticalOut of range index in getTokenBurnFee() causes function reversion after 14 daysStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
HighAn attacker can create many small deposits on behalf of the victim using just dust amountStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
HighReentrance vulnerability in processRewards() and updateStakeLock() FunctionsStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
HighReentrancy Guard Conflict in _processVaultRewards Private FunctionStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
MediumRounding Issue While Calculating liquidPercentageStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
MediumStaker Can Extend Expired LocksStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
MediumvaultRewardsPerWeight Should Be Updated When _processVaultRewards()Starter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
LowLocation: PoolBase.solStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
LowMissing Deposit ID Emission on New DepositStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
LowRedundant Initialization of VariablesStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report
Show 1 more
LowUse of require Statements Instead of Modifiers for Access ControlStarter Smart Contract Review · Zokyo · 26 Jun 2024Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
	<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
	<div
		data-tb-project-widget
		data-tb-project-slug="starter-labs"
	></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us