Submission Details
Severity:
claim Reentrancy Attack:Staking.sol
Summary
Claim Reward in Staking.sol contract, but claimable value will be updated after transfer which lead to very well know Reentrancy on function.
Vulnerability Details
Reentrancy Attack user can claim amount multiple time by call function from other contract and take all balance from contact.
Impact
Lose if all balance in contract
Tools Used
Remix and foundry
Recommendations
Used openzeppelin-contracts :ReentrancyGuard contract to defend from Reentrancy and updated claimable value first then call transfer.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.