Summary

The staking period end can be frontran by a malicious user by submitting a transaction calling a function which itself calls the stake function and then the unstake function, enabling them to receive the points awards without helping bootstrap liquidity to for the ERC4626 WETH vault.

Impact

Low impact

Tools Used

Manual Review

Recommendations

Consider implementing a timelock, a fee mechanism or a combination of thereof to disincentivise such value extraction.