SecurityLab / Reports / ETH🔍 ToakenStaking
📍 0x8FA360F170ad744E6B58431269fAc181c7efF1C9 · 🌐 ETH · 🤖 engine: heuristic
💰 Balance: 0.0 · 📈 Tx: 0
CRITICAL 8
HIGH 3
MEDIUM 2
LOW 9
Findings preview
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
CRITICAL Reentrancy with ETH withdrawal (repeated entry)
HIGH tx.origin used for authorization
HIGH tx.origin used for authorization
HIGH Insufficient input validation (arbitrary address/param)
MEDIUM Classic ERC20 approve without increase/decreaseAllowance
MEDIUM Reward accounting flaw (repeated claim / uncapped payout)
LOW Floating compiler version (^ or >=)
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
LOW Logic depends on block.timestamp
INFORMATIONAL Sensitive function without explicit access control
INFORMATIONAL Sensitive function without explicit access control
INFORMATIONAL Sensitive function without explicit access control
INFORMATIONAL Sensitive function without explicit access control
INFORMATIONAL Oracle price manipulation (spot/TWAP/stale)
INFORMATIONAL AMM pair reserve manipulation (privileged burn / sync)
INFORMATIONAL Token mechanic incompatibility (deflationary/rebasing/fee-on-transfer)
INFORMATIONAL Liquidation logic flaw (self-controlled borrower+taker)
Preview only — no exploit details or fix recommendations are published here
to avoid disclosing an unpatched issue before the contract owner sees it. Full report (RU+EN), exact lines,
exploit path and fork PoC — via the bot below.
📩 Get full report via Telegram
View contract on block explorer →
⚠️ Think this finding is wrong?
If you're the contract owner and believe this automated finding is inaccurate,
or want this page reviewed or removed, send us your contact details and we'll get back to you.
Enable JavaScript to use this form, or message @mkoldaev on Telegram.