Fjord Token Staking
Fjord
Submission Details
Severity: medium
ValidAllowing users to stake and unstake in thesame epoch can open a vulnerability in the FjordPoints.sol contract making users earn point without staking for long.
Updates
Appeal created
Submission Judgement Published
Validated
Assigned finding tags:
If epoch end times of FjordStaking and FjordPoints are desynchronized, users will be able to exploit the desynchronization to stake>claim>unstake instantly, getting points they shouldn't
Impact: High - Users are getting an unreasonable amount of points through exploiting a vulnerability Likelihood: Low - Most of the times, when using the script, all deployment tx will get processed in the same block. But, there is a small chance for them to be processed in different blocks.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
High Medium
16,000 USDC
Low
2,500 USDC
Judges
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.