Skip to content
Quantix Security Labs

Tamarind Staking

Liquid staking modules with reward distribution and cooldowns.

Staking modules written in Move for Aptos and Sui. Users stake the native asset for a receipt token; rewards are distributed through a reward-per-share index and unstaking passes through a cooldown queue.

Ecosystem
APTAptos, Sui
Category
Staking
Languages
Move (Aptos), Move (Sui)
Launched
Jan 2026
74.8BBElevated risk

Grade BB · Elevated risk

Moderate risk; several areas need remediation.

+2.4 since Jan 2026 · ±0.0 since Jul 2026

Quantix Protocol Research · as of 24 Oct 2026 · About this data

Risk Index

How the score is built

Six weighted components, each scored 0–100 where higher means less risk. Points are the component value multiplied by its weight; the gap is what the component costs against a perfect score.
ComponentWeightValuePointsGap
Code Security30%7622.8−7.2
Operational Security20%7414.8−5.2
Governance Risk15%7010.5−4.5
Economic Security15%7811.7−3.3
Infrastructure Resilience10%767.6−2.4
Transparency10%747.4−2.6
Quantix Risk Index100%74.8−25.2
CodeOperationalGovernanceEconomicInfrastructureTransparencyTamarind Staking, Code: 76Tamarind Staking, Operational: 74Tamarind Staking, Governance: 70Tamarind Staking, Economic: 78Tamarind Staking, Infrastructure: 76Tamarind Staking, Transparency: 74
Risk Index components: Tamarind Staking Code 76, Operational 74, Governance 70, Economic 78, Infrastructure 76, Transparency 74
ComponentTamarind Staking
Code76
Operational74
Governance70
Economic78
Infrastructure76
Transparency74

Grade scale

  1. AAA90–100
  2. AA85–89.9
  3. A80–84.9
  4. BBB75–79.9
  5. BB70–74.9
  6. B65–69.9
  7. CCC60–64.9
  8. CC55–59.9
  9. C50–54.9
  10. D0–49.9

Score history

10 monthly snapshots

Each point is the Risk Index computed from that month’s component values. Markers below the chart show the events that moved a component; the history starts at launch in Jan 2026.
Tamarind Staking Quantix Risk Index by month
PeriodQuantix Risk Index
Jan ’2672.4
Feb ’2672.4
Mar ’2672.4
Apr ’2674.6
May ’2674.6
Jun ’2674.6
Jul ’2674.8
Aug ’2674.8
Sep ’2674.8
Oct ’2674.8

  1. 14 Jul 2026

    Infrastructure

    Sui deployment launched

    Second deployment reduces dependence on one network.

    • Infrastructure Resilience+2

  2. 29 Apr 2026

    Research assessment

    Research assessment completed: Smart Contract Audit

    6 findings (2 high, 2 medium, 1 low, 1 informational). All critical and high findings addressed.

    Read the research assessment
    • Code Security+6
    • Transparency+4

Risk factors

What keeps the score from being higher, most severe first.

  • HighGovernance RiskProfile analysis

    Single-holder AdminCap

    The capability object that controls parameters sits in one account; its compromise lets an attacker set fees to the maximum.

  • MediumCode SecurityProfile analysis

    Reward index precision

    Rewards accrue through an index with limited scaling, so frequent small distributions can round to zero for small stakers.

  • LowCode SecurityFrom the research assessment

    2 lower-severity findings not fully resolved

    Medium, low or informational findings remain open or partially resolved in the research assessment.

Recommendations

Each recommendation raises one component to a target value. The score effect is recomputed with the Risk Index model, holding every other component fixed.

  • Code Security: 76 → 82

    Increase index scaling

    Scale the reward index by 1e18 and carry remainders between distributions.

    +1.8

    → 76.6

  • Governance Risk: 70 → 80

    Move AdminCap to a multisig object

    Wrap the capability in a multisig-controlled object with a delay on parameter changes.

    +1.5

    → 76.3

Analysis

Contract, governance and operations

Contract analysis

Source
Verified
Upgradeability
Compatible upgrade policy (Aptos) and UpgradeCap (Sui)
Administrative control
AdminCap held by a single address on each chain
Enforced delay
None identified
External dependencies
Unstake keeper; Validator reward distribution
  • PassSource published. Move packages published with matching bytecode.
  • CautionUpgrade policy. Packages remain upgradeable under the compatible policy.
  • FailAdmin capability. AdminCap is owned by a single account on both chains.
  • CautionReward precision. Reward-per-share index scaled by 1e9; small stakes can round to zero rewards.

Governance exposure

High

A single account holds the capability to change fees, cooldown length and reward parameters on both chains.

Operational resilience

Adequate

Cooldown processing depends on an off-chain keeper; users can self-process after a delay.

Monitoring

Monitoring history

1 recorded security events for Tamarind Staking, most recent first.
Open in Security Monitoring
  1. 15 Oct 2026HighAdmin capability moved to a multisig accountAccess Control · admin_capResolved

Research assessment

QX-TSA-2026-006Smart Contract AuditPublished

Aptos Move modules for staking, reward-index accounting, the unstake cooldown queue and the admin capability.

Review 20 Apr 2026 – 29 Apr 2026 · published 12 May 2026

Critical0
High2
Medium2
Low1
Informational1
  • 3 resolved
  • 1 partially resolved
  • 1 acknowledged
  • 1 open
Read the assessmentReport PDF

Continue with

Comparable protocols

Compare side by side

Research

Relevant research

Publications on the risks that matter most for a staking protocol on Aptos.

Architecture

System components

staking_pool
Stake, unstake and receipt-token accounting
reward_index
Reward-per-share accumulation and claims
unstake_queue
Cooldown and withdrawal processing
admin_cap
Capability object for parameter updates

Turn risk factors into a remediation plan.

A research assessment traces each weakness to code, configuration or process, and verifies the fix before the score moves.

Discuss Your Security RequirementsBack to the Security Explorer