20,000 USDC
View results
Submission Details
Severity: high
Valid

Loss of reward tokens when there are zero staking participants

Summary

When there are no staking participants, any reward token (WETH) sent to the staking contract is not claimable by anyone and therefore lost forever

Vulnerability Details

When there are no staking participants, reward tokens (WETH) sent to the staking contract are not claimable. Since what is claimable by participants is a percentage of the amount of reward tokens accumulated only after staking, it is only logical that if there are no participants when reward tokens are being accumulated by the staking contract, nobody can claim the reward.

Impact

Permanent loss of reward tokens (WETH)

Tools Used

cold logic

Recommendations

The solution depends on what's acceptable to the protocol. Possible solutions include introducing a mechanism to send such rewards to a specified address or one to let the first staker claim such reward.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.