Fjord Token Staking

DeFiFoundry
20,000 USDC
Submission Details
Severity: medium
Valid

Epoch desynchronization allows gaming of point distribution

Updates

Lead Judging Commences

InAllHonesty Lead Judge
about 1 month ago
InAllHonesty Lead Judge 26 days ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Appeal created

nnez Submitter
26 days ago
InAllHonesty Lead Judge
23 days ago
InAllHonesty Lead Judge 23 days ago
Submission Judgement Published
Validated
Assigned finding tags:

If epoch end times of FjordStaking and FjordPoints are desynchronized, users will be able to exploit the desynchronization to stake>claim>unstake instantly, getting points they shouldn't

Impact: High - Users are getting an unreasonable amount of points through exploiting a vulnerability Likelihood: Low - Most of the times, when using the script, all deployment tx will get processed in the same block. But, there is a small chance for them to be processed in different blocks.

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.