# GoGoPool audit contest Code4rena · Avalanche liquid staking · 15th December 2022 · #36 A public audit contest on Code4rena (Avalanche liquid staking), completed on 15th December 2022. 0xSimao placed #36. 3 of his findings are published: 3 medium. ## What GoGoPool is GoGoPool is a decentralised liquid staking protocol on Avalanche built to be the easiest way to stake AVAX: users with less than 2000 AVAX stake liquidly through ggAVAX, while node operators bring hardware plus a matching deposit and take delegations from the pool, with GGP collateral staked against their performance. ## Scope The full protocol: minipools, ggAVAX, GGP staking and rewards, the oracle and the DAO storage layer. ## Medium severity findings - [Slashing fails when node operator doesn't have enough staked `GGP`](https://0xsimao.com/findings/gogopool-slashing-fails-node-ggp) - [Any duration can be passed by node operator](https://0xsimao.com/findings/gogopool-duration-passed-node-operator) - [Wrong reward distribution between early and late depositors because of the late `syncRewards()` call in the cycle, `syncReward()` logic should be executed in each withdraw or deposits (without reverting)](https://0xsimao.com/findings/gogopool-reward-rewards-withdraw-deposits) ## The contest [View the contest page](https://code4rena.com/audits/2022-12-gogopool-contest)