DittoETH

Summary

The user cannot control the amount of ethers he will receive. He may get less due to slashing

Vulnerability Details

During the slashing period, the amount of ether is reduced in the contract balance and the user will receive less ether than ,if he call function during a non-slashing period. If the user knew about this, he might have called the function later, when there would have been enough ether - so as not to lose funds. During the slashing period, the amount of ether is calculated proportionally. If later there is more ether again, the user will not be able to take back the lost portion

Impact

The user cannot control the amount of ethers he will receive. He may get less due to slashing

Tools Used

Manual review

Recommendations

Add new parameter minAmountOut in function withdraw()