Fjord Token Staking

Summary

See Bellow

Vulnerability Details

In the FjordStaking contract, the _unstakeVested function lacks a crucial check for the stream status that is present in the stakeVested function. Specifically, the stakeVested function includes a validation to ensure that the stream is warm before proceeding:

This check ensures that only active (warm) streams are processed during staking. However, the _unstakeVested function does not implement a similar check:

Impact

The absence of this check in the _unstakeVested function could lead to issues where users attempt to unstake from a cold (inactive) stream. This could result in unintended behavior or incorrect state updates in the contract, potentially affecting user funds or the contract’s overall integrity.

Tools Used

Manual

Recommendations

Add a check in the _unstakeVested function to ensure that the stream is warm before allowing the unstaking operation.