diff --git a/webapp/controller/StakingController.class.php b/webapp/controller/StakingController.class.php
index 79fcc692..eded0a8c 100644
--- a/webapp/controller/StakingController.class.php
+++ b/webapp/controller/StakingController.class.php
@@ -153,6 +153,10 @@ class StakingController extends BaseAuthedController {
                 }
             }
         }
+        if (count($checkList) != count($confirmedNfts)) {
+            myself()->_rspErr(3, 'paramater error');
+            return;
+        }
     }
 
     private function isTypeNft($type, $dbInfo)