DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: medium
Invalid

Denial of service at unstakeAll fucntion for FjordStaking contract

Line: https://github.com/Cyfrin/2024-08-fjord/blob/6614c7f97f6fb020f1a980215e7579615027ba8e/src/FjordStaking.sol#L570

The unstakeAll function does not have a rate-limiting mechanism. A malicious user could repeatedly call this function, potentially leading to a denial-of-service (DoS) attack.

Recommendation: Consider implementing a rate-limiting mechanism or require a minimum time interval between calls to unstakeAll.

Updates

Lead Judging Commences

inallhonesty Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.