Incident
Incident,
Source: De.Fi incident database.
- Audits before it
- 3.
- Audits since
- None on Trustblock.
WINR Chain security record
As of 3 Nov 2026, WINR Chain has 3 audit reports by 1 security firm on Trustblock; the latest is by Paladin, dated 26 Apr 2023. Those reports list no open critical findings. It also holds 5 deployed contracts on 1 chain and 1 incident (latest 30 May 2024).
Critical findings
No open critical findings
Across 3 reports.
Incident
Incident 30 May 2024
Source: De.Fi incident database. No audit on Trustblock is dated after it. See the incident
Open the latest report
Your label, live
Get the label for your siteRecord last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report - GenesisWLPStaking | Security firm: Paladin | Date: | Scope: 1 address on Arbitrum | No open critical findings | Open · IPFS |
| Audit Report - WINR Protocol | Security firm: Paladin | Date: | Scope: 3 addresses on Arbitrum | No open critical findings | Open · paladinsec.co |
| Audit Report | Security firm: Paladin | Date: | Scope: 1 address on Arbitrum | No open critical findings | Open · paladinsec.co |
Findings43
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 2 |
| Low | 3 | 3 | 30 |
HighGovernance risk: Governance can break the contract in multiple ways and take out the underlying tokensAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportHighIt is possible that the firstBlock value resets after everyone withdraws, restarting reward emissionsAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportHighPool reward logic is fundamentally flawed resulting in wrong and excessive rewardsAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportHighrewardPerBlock is incorrectly calculated in fundReward and updateMaxBlockAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportHighUsers can lose deposits if they deposit a second timeAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportMediumThe same investor can be added twice by governance which will cause supply to be locked awayAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportMediumUsers can still deposit even after the dueDateAudit Report · Paladin · 3 Mar 2023Fixed
The report gives no description here.
Open the reportLowArbitrum L2 block frequency might be quite irregularAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportLowwithdraw does not adhere to checks-effects-interactions which means if harvest were to allow for reentrancy, the WLP balance could be drainedAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportShow 10 more
Lowwithdraw does not reset wlpPerToken which prevents a secondary deposit after withdrawal from accumulating wlp rewardsAudit Report - GenesisWLPStaking · Paladin · 26 Apr 2023Fixed
The report gives no description here.
Open the reportLowBURNER_ROLE seems to impose excessive privileges as people should not need a privilege to burn their own tokensAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowBURNER_ROLE seems to impose excessive privileges as users should not need a privilege to burn their own tokensAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowDateTime days will eventually start shifting compared to calendar daysAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowGovernance can accidentally renounce their role by calling setGov to their own addressAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowInconsistent usage of msgSender() and msg.senderAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowInitialization of DEFAULT_ADMIN_ROLE is redundant with GovernableAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowInitialization of DEFAULT_ADMIN_ROLE is redundant with GovernableAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowInvestor start and end times do not align with the actual vest start and end timesAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowLack of enumerability on role holders makes it difficult for people to inspect which accounts have privilegesAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowLack of explicit maximum supply handling can cause certain vesters to never receive their tokensAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowLack of validationAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowmint will implicitly not mint any tokens once the maximum supply has been reached, which could lead to bugs within contracts which do not handle this caseAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowmint will implicitly not mint any tokens once the maximum supply has been reached, which could lead to bugs within contracts which do not handle this caseAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowOpenZeppelin’s _setupRole is deprecated in favour of _grantRoleAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowRecurring rewards are sometimes slightly reduced due to unnecessary roundingAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowThe amount of tokens that can be minted can exceed MAX_SUPPLY as the cap does not take into consideration that burned tokens are removed from the supplyAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowThe amount of tokens that can be minted can exceed MAX_SUPPLY as the cap does not take into consideration that burned tokens are removed from the supplyAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportShow 7 more
LowTypographical errorsAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report - WINR Protocol · Paladin · 12 Mar 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationAudit Report · Paladin · 3 Mar 2023Fixed
The report gives no description here.
Open the reportLowGovernance risk: Contract admins can withdraw all USDC from the WhitelistPoolAudit Report · Paladin · 3 Mar 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorAudit Report · Paladin · 3 Mar 2023Fixed
The report gives no description here.
Open the reportLowUsers will appear to have very little gWLP tokens due to a decimal errorAudit Report · Paladin · 3 Mar 2023Fixed
The report gives no description here.
Open the reportIncidents1
Attached through a shared contract address. Our incident data ends in Nov 2026.
Contracts5
| Address | Chain | Source code |
|---|---|---|
| 0x2798419f2db8ea5f0f3a9b405313801e052b9ca7 | Chain: Arbitrum | Source code: Verified source |
| 0x6ed34c4d56b82a76e6540b7cc2d35000873e1dd6 | Chain: Arbitrum | Source code: Verified source |
| 0x63097e97ba51b64547cf1f4ba154495d7af74582 | Chain: Arbitrum | Source code: Verified source |
| 0xd77b108d4f6cefaa0cae9506a934e825becca46e | Chain: Arbitrum | Source code: Verified source |
| 0xc885b641cb11ce2b38a7c28b79318c4b89cf04f9 | Chain: Arbitrum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="winr-protocol"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us