MorpheusAI

Summary

The malicious user can claim someones rewards without the notice of actual owner of this rewards

Vulnerability Details

Imagine the situation where the users stakes the tokens and what to hold them until certain time to gain the rewards, he has no purpose to claim it. However the malicious user can intersect it and without the notice claim the rewards. This will proceed through the L1Sender.sol 'sendMintMessage' exactly to the L2MessageReceiver where the tokens will be minter to the user who has the reward. Since the attacker can't exactly steal the rewards he could cause a lot of inconvenience for the actual staker. Additionally, if the malicious user send not enough gas the tx can be stuck in the L2MessageReceiver and the actual user must call the 'retryMessage' function to retrieve the funds. I

Impact

The users reward could be claimed untimely without the notice, causing a lot of inconvenience

Tools Used

Manual Review

Recommendations

Make that only the msg.sender can claim the rewards