Skip to content
Trust & Security

Security & Audits — How Stakingverse Protects Your Stake

Non-custodial smart contracts, independent audits and validator infrastructure spread across multiple data centers. Here is exactly how your LYX and ETH stake is protected.

Non-Custodial by Design

When you stake with Stakingverse, your coins go into a smart contract — not into our hands. We operate and maintain the validators your deposit activates. On Ethereum, you manage your StakeWise V3 vault position using your wallet, and withdrawals follow the vault rules and exit queue. If you mint osETH, collateral requirements apply. Redemption and liquidation rules depend on the vault configuration. Clear your outstanding osETH position to withdraw your full stake. See the StakeWise vault staking guide.

On LUKSO, stake and sLYX can be transferred; the current position and vault rules determine withdrawal rights. Burning sLYX returns staked LYX, which must then be withdrawn separately. Documented contracts include privileged controls such as pausing and oracle configuration. Non-custodial does not mean risk-free. You remain responsible for wallet access. If you lose access to your wallet or keys, we cannot recover your coins for you — so please take the usual precautions with your keys.

Smart-Contract Audits

The Stakingverse vault and liquid staking contracts on LUKSO trace back to the Universal Page contracts repository and have been audited multiple times by independent reviewers:

AuditorDateScopeReport
ExtropyOctober 2024StakingverseVault.sol and liquid staking contractsRead the report
Enigma Ventures—Liquid staking contractsRead the report
MiloTruck—StakingverseVault.sol and liquid staking contractsRead the report
Nethermind AI Agent—StakingverseVault.sol and liquid staking contractsRead the report

The Ethereum vault runs on StakeWise V3, which has undergone multiple security audits by leading blockchain security firms, including Sigma Prime (September 2024), ConsenSys Diligence (March 2024), Halborn (August 2023).

Audits cover specific code and versions; they do not guarantee security or cover every later change or integration. Reports and network-specific risks are linked from our documentation: LUKSO security docs and Ethereum security docs.

Infrastructure

We run our validator nodes on multiple Virtual Private Servers hosted by DigitalOcean, a highly reliable and professional infrastructure provider, spread out over multiple secure data centers around the world. We constantly monitor and update our servers to keep security and reliability high.

Distribution across infrastructure is intended to reduce correlated failures. It does not eliminate outages, software faults, missed rewards or penalties.

Slashing-Risk Mitigation

Slashing — a network penalty for validator misbehavior — is the significant operational risk in staking. Monitoring and infrastructure diversification help mitigate it, but cannot guarantee that slashing or correlated failures will not occur.

On Ethereum, StakeWise oracles report rewards and penalties, approve validator registrations and enable validator exits. They hold no funds, but their signed reports are used by the protocol. Oracle failures or compromise therefore cannot be treated as risk-free for stakers. See the StakeWise oracle documentation for their role and signature checks. LUKSO uses separate contracts; see the LUKSO security documentation.

Responsible Disclosure

Found a vulnerability or something that looks off? We want to hear about it. Email us at support@stakingverse.io or reach out through our contact page, and we will follow up promptly. For general questions about how staking works, see the staking FAQ.

Questions about security?

Contact our team about our security practices or report a concern.

Contact us