Submission Details
Severity:
While splitting rewards , if the fee receiver is lst it always reverts
Vulnerability Details
Erc20 Upgradable doesn't have a public burn function , but here it uses a public one which is absent -
https://github.com/Cyfrin/2024-09-stakelink/blob/main/contracts/core/lstRewardsSplitter/LSTRewardsSplitter.sol#L178C9-L180C14
IStakingPool(address(lst)).burn(amount);
}
Impact
It will always revert
Tools Used
Manual Review
Recommendations
Use some other mechanism to burn the token
Updates
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
2,53020 USDC / LOC
42,000 USDC
4,250 USDC
3,750 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.