Beginner FriendlyFoundryDeFi
100 EXP
View results
Submission Details
Severity: low
Valid

[L-1] Insufficient Stake Amount Enforcement (Minimum Stake Amount Can Be Circumvented)

Description:

The contract is designed to enforce a minimum staking amount of 0.5 ETH. However, it is possible for a user to stake the minimum required amount and then immediately unstake a portion of it, reducing their staked balance to below the minimum threshold. The absence of a cooldown period or other restrictions allows users to circumvent the minimum staking amount requirement by quickly unstaking part of their deposit. This behavior undermines the contract's intention of maintaining a minimum stake per user.


Impact

    • * Reduced Stake Requirement:* Users can bypass the minimum staking amount, potentially reducing the overall staked ETH in the contract.

    • Point Allocation Issues: Users who stake and quickly unstake might still receive points based on the initial stake, leading to an unfair distribution of rewards.

Tools Used

Manual Review

Recommendations*
Prevent users from unstaking if it would cause their staked balance to fall below the minimum required amount.*

Updates

Lead Judging Commences

inallhonesty Lead Judge 10 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Minimum Stake Amount Can Be Circumvented

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.