Fjord Token Staking
Fjord
Submission Details
Severity: medium
ValidUsers can frontrun `Points` distribution without needing to lock tokens for the `lockCycle` in `FjordStaking` under specific edge case scenarios.
Updates
Appeal created
Submission Judgement Published
Validated
Assigned finding tags:
If epoch end times of FjordStaking and FjordPoints are desynchronized, users will be able to exploit the desynchronization to stake>claim>unstake instantly, getting points they shouldn't
Impact: High - Users are getting an unreasonable amount of points through exploiting a vulnerability Likelihood: Low - Most of the times, when using the script, all deployment tx will get processed in the same block. But, there is a small chance for them to be processed in different blocks.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
High Medium
16,000 USDC
Low
2,500 USDC
Judges
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.