diff --git a/webapp/controller/StakingController.class.php b/webapp/controller/StakingController.class.php
index 45fb32ab..633e09e4 100644
--- a/webapp/controller/StakingController.class.php
+++ b/webapp/controller/StakingController.class.php
@@ -117,8 +117,25 @@ class StakingController extends BaseAuthedController {
         $tokenIdList = getReqVal('token_id_list', '');
         $contractAddressList = getReqVal('contract_address_list', '');
         $netId = getReqVal('net_id', '');
+        if (count($tokenIdList) <= 0) {
+            myself()->_rspErr(1, 'paramater error');
+            return;
+        }
+        if (count($tokenIdList) != count($contractAddressList)) {
+            myself()->_rspErr(1, 'paramater error');
+            return;
+        }
+        $confirmedNfts = array();
         {
             $nftList = Nft::getNftList(myself()-_getAddress());
+            foreach ($nftList as $nft) {
+                if (in_array(
+                    $nft['token_id'],
+                    $tokenIdList
+                )) {
+                    array_push($confirmedNfts, $nft);
+                }
+            }
         }
     }