Submission Details
Severity:
Improper init value for claim in staking
Summary
Improper init value for claim in staking
Vulnerability Details
Alice mint soulmate token in timestamp A.
Alice deposit soulmate token in staking in timestamp B.
When Alice tries to claim rewards, it's better to calculate rewards from timestampB not timestampA.
Impact
Users can claim more rewards than expected.
Tools Used
Manual
Recommendations
Record timestamp when user deposit/withdraw, and update rewards timely.
Updates
Lead Judging Commences
0xnevi over 1 year ago
Submission Judgement Published Assigned finding tags:
finding-claimRewards-multi-deposits-time
High severity, this allows users to claim additional rewards without committing to intended weekly staking period via multi-deposit/deposit right before claiming rewards.
Rewards breakdown
nSLOC
233This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.