Submission Details
Severity:
No transfer out function in `OperatorStakingPool`
Vulnerability Details
OperatorStakingPool.sol is meant to hold LST from operators. It receives them from an LST ERC677 transferAndCall() action. Yet the contract has no way of transferring those LST out of it.
There are no transfers neither approvals to other protocol contracts to use a transferFrom() and so on. Funds get stuck.
See the contract and the specific _withdraw() logic here.
Impact
Operators who send their LST to the OperatorStakingPool are stuck forever.
Recommendations
In the very same contract, on the withdraw() function, actually transfer them out.
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
`OperatorStakingPool::_withdraw()` function doesn't transfer the tokens
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
2,53020 USDC / LOC
42,000 USDC
4,250 USDC
3,750 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.