DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: medium
Invalid

Missing logic for handling the vested FJORD tokens in the onStreamWithdrawn function

Summary

Stream's sender or an approved third party can call the withdraw function to withdraw the stream's balance.
This action triggers the onStreamWithdrawn function.
However, the onStreamWithdrawn function doesn't have any logic to unstake the vested FJORD tokens.

Vulnerability Details

https://github.com/Cyfrin/2024-08-fjord/blob/main/src/FjordStaking.sol#L792

Impact

The absence of implementation in the onStreamWithdrawn function means the contract does not handle the vested FJORD tokens properly.

Tools Used

Manual review

Recommendations

Implement the logic to unstake the vested FJORD tokens in the onStreamWithdrawn function.

Updates

Lead Judging Commences

inallhonesty Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.