Submission Details
Severity:
Reentrancy Attack Vulnerability
Summary
The Staking contract is vulnerable for the re-entrancies attacks.
Vulnerability Details
In the claim function the claimable[msg.sender] variable is updated after the tokens are transfered.
Impact
This allows an attacker to re-entrant the function and withdraw the tokens that do not belong to them until the contract balance is empty.
Tools Used
Manual review
Recommendations
Follow the CEI pattern or use the nonReentrant modifier.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.