Submission Details
Severity:
rewardPerTokenStored can be inflated and rewards can be stolen
Summary
Vulnerability Details
Impact
The first user who calls TempleGoldStaking.sol stake() with 1 wei can inflate the rewardPerTokenStored. And the same user can call withdraw and drain the rewards.
Since rewardPerToken() depends on the denominator as totalSupply(), the whole multiplying will be divided by 1 wei which will inflate the rewardPerTokenStored.
Tools Used
Recommendations
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.