Non-Custodial by Design
When you stake with Stakingverse, your coins go into a smart contract — not into our hands. We operate and maintain the validators your deposit activates. On Ethereum, you manage your StakeWise V3 vault position using your wallet, and withdrawals follow the vault rules and exit queue. If you mint osETH, collateral requirements apply. Redemption and liquidation rules depend on the vault configuration. Clear your outstanding osETH position to withdraw your full stake. See the StakeWise vault staking guide.
On LUKSO, stake and sLYX can be transferred; the current position and vault rules determine withdrawal rights. Burning sLYX returns staked LYX, which must then be withdrawn separately. Documented contracts include privileged controls such as pausing and oracle configuration. Non-custodial does not mean risk-free. You remain responsible for wallet access. If you lose access to your wallet or keys, we cannot recover your coins for you — so please take the usual precautions with your keys.
Smart-Contract Audits
The Stakingverse vault and liquid staking contracts on LUKSO trace back to the Universal Page contracts repository and have been audited multiple times by independent reviewers:
| Auditor | Date | Scope | Report |
|---|---|---|---|
| Extropy | October 2024 | StakingverseVault.sol and liquid staking contracts | Read the report |
| Enigma Ventures | — | Liquid staking contracts | Read the report |
| MiloTruck | — | StakingverseVault.sol and liquid staking contracts | Read the report |
| Nethermind AI Agent | — | StakingverseVault.sol and liquid staking contracts | Read the report |
The Ethereum vault runs on StakeWise V3, which has undergone multiple security audits by leading blockchain security firms, including Sigma Prime (September 2024), ConsenSys Diligence (March 2024), Halborn (August 2023).
Audits cover specific code and versions; they do not guarantee security or cover every later change or integration. Reports and network-specific risks are linked from our documentation: LUKSO security docs and Ethereum security docs.
Infrastructure
We run our validator nodes on multiple Virtual Private Servers hosted by DigitalOcean, a highly reliable and professional infrastructure provider, spread out over multiple secure data centers around the world. We constantly monitor and update our servers to keep security and reliability high.
Distribution across infrastructure is intended to reduce correlated failures. It does not eliminate outages, software faults, missed rewards or penalties.
Slashing-Risk Mitigation
Slashing — a network penalty for validator misbehavior — is the significant operational risk in staking. Monitoring and infrastructure diversification help mitigate it, but cannot guarantee that slashing or correlated failures will not occur.
On Ethereum, StakeWise oracles report rewards and penalties, approve validator registrations and enable validator exits. They hold no funds, but their signed reports are used by the protocol. Oracle failures or compromise therefore cannot be treated as risk-free for stakers. See the StakeWise oracle documentation for their role and signature checks. LUKSO uses separate contracts; see the LUKSO security documentation.
Responsible Disclosure
Found a vulnerability or something that looks off? We want to hear about it. Email us at support@stakingverse.io or reach out through our contact page, and we will follow up promptly. For general questions about how staking works, see the staking FAQ.
