StakeVerse
Security-Hardened Governance & Staking Protocol
StakeVerse is an on-chain governance and staking protocol centered on DAO-controlled authority. A token supplies historical voting power to a DAO that governs protocol administration through on-chain proposals, while a separate staking contract maintains its own protected reward accounting.
System Model
- Governance
- StakeVerseDAO holds administrative authority over the protocol, including itself.
- Token / Voting Power
- StakeVerseToken supplies historical voting power to governance through delegated ERC20Votes checkpoints.
- Staking / Reward Accounting
- StakeVerseStaking runs a fixed-rate reward pool with principal and reward liquidity tracked separately.
- Membership NFT
- StakeVerseNFT is a DAO-minted ERC-721 membership badge; it does not currently gate staking or governance.
- Oracle Boundary
- PriceOracleConsumer validates Chainlink price data as a standalone contract, not yet consumed by the core protocol.
Architecture
StakeVerseDAO is the root administrative authority: it owns the token, staking, and NFT contracts, and owns itself. Governance therefore controls every protocol-level administrative action, including its own rules.
Governance
- StakeVerseDAO
- Root administrative authority. Owns Token, Staking, NFT, and itself; executes protocol-level actions through successful proposals.
Token / Voting Power
- StakeVerseToken
- ERC-20 utility and governance token (OpenZeppelin ERC20Votes, timestamp-based voting clock). DAO-controlled minting, DAO-owned. Voting power comes from delegated checkpoints — staking does not add voting weight.
Staking / Reward Accounting
- StakeVerseStaking
- Single fixed-rate staking pool. Principal and reward liquidity are tracked separately; reward claims are bounded by a funded reward reserve.
Membership NFT
- StakeVerseNFT
- ERC-721 membership badge, DAO-minted. Currently non-scarce and does not gate staking or governance.
Oracle Boundary
- PriceOracleConsumer
- Chainlink AggregatorV3 integration validating round completeness, price positivity, and staleness. Standalone — not currently consumed by staking or governance.
Oracle Boundary
PriceOracleConsumer is a standalone Chainlink integration, not currently wired into staking or governance decisions.
Governance Execution
Voting power is bound to historical checkpoints, not current balances — delegation has to happen before a proposal's snapshot to count. Successful proposals execute permissionlessly, and the DAO can act on itself through the same mechanism.
Staking Model
Staking, unstaking, and reward claims are permissionless; funding, pausing, and the reward rate are DAO-controlled. Reward claims draw only from a separately funded reserve and can never consume staked principal.
- Principal and reward liquidity are accounted separately
- Reward claims are bounded by the funded reward reserve
- Fixed reward rate, DAO-adjustable
- Pausing blocks new staking without trapping withdrawals or claims
Security / Invariants
- Reward claims cannot exceed the funded reward reserve
- Reward claims cannot consume staked principal
- Voting power is bound to historical checkpoints, preventing current-balance or just-in-time voting
- Proposal quorum is evaluated against the proposal's own snapshot
- Successful proposals execute permissionlessly, with no privileged executor
- DAO ownership of every contract removes the deployer as a continuing administrator
- Emergency pause blocks new staking without trapping existing funds
- Chainlink price data is rejected when stale, future-dated, or incomplete
Verification
- 146/146 tests passing
- 100% line/statement coverage on every production contract
- CI recompiles and re-runs the full test suite on every push
- Frontend typecheck, build, and lint validated in CI
- Deployment workflow re-verifies chain ID before broadcasting
- Deployment workflow re-verifies deployed bytecode against source
- Deployment workflow independently re-verifies contract ownership on-chain
- Current Sepolia contracts are DAO-owned, confirmed post-deployment
Deployment
- Network
- Ethereum Sepolia (testnet), chain ID 11155111
- Live Application
- stakeverse.vercel.app
- StakeVerseToken
- 0xf87d0115aF9Fc668d69c540dD7c27BC032d9Afcd
- StakeVerseDAO
- 0x8B555044B4c0A0a91cb0028043004d94291FD01F
- StakeVerseStaking
- 0x5EBd1259223CD30D1Ba95298b517F1F59ABBEa64
- StakeVerseNFT
- 0xA2C7c2db9Ca89b90994049e74d1Ea3eaB62F286C
- PriceOracleConsumer
- 0x5773E1acaE1Bda00caCedC5ebA1653db2C1e749F
Current State
StakeVerse is deployed and DAO-owned on Ethereum Sepolia — not mainnet. The current implementation has a few known gaps between contract capability and what the frontend or documentation currently expose.
- Staking UI does not currently expose the contract's unstake function
- The dashboard's oracle price is currently hardcoded, not a live read from PriceOracleConsumer
- NFT ownership does not currently affect staking or governance
- Token issuance is uncapped, controlled entirely by DAO governance; NFT issuance is non-scarce
- No third-party audit or static-analysis review has been performed
- Deployed contracts are not currently source-verified on a block explorer
- Contracts are not upgradeable — fixes require redeployment and migration