Liquid Staking

Summary

Redundant depositLimit check in OperatorStakingPool

Vulnerability Details

The OperatorStakingPool already ensures that the operator deposits didn't exceed the depositLimitin the onTokenTransferfunction which is the entry point for the token to enter the contract. Yet, the getOperatorPrincipalview function need to check this again that the returned value does not exceed the depositLimit.

Impact

The code became more complex than it should have been.

Tools Used

Manual Review

Recommendations

Just return the balance in the getOperatorPrincipalview function directly without the need to check the depositLimit