Operators can deposit but could not be able to withdraw.
Summary
In a contract OperatorStakingPool there is a function onTokenTransfer which receives lst token from Operators but after depositing tokens into OperatorStakingPool Operators cannot withdraw their lst tokens.
Vulnerability Details
If any operator who deposited their tokens in OperatorStakingPoolwants to withdraw tokens using withdraw function(operators can directly call it) he will not receive tokens. But, on the other hand their balance got subtracted in the mappings of OperatorStakingPool.
Impact
Operators cannot withdraw their deposited tokens.
Tools Used
Manual Review
Recommendations
Call function from lst ,so the balance of OperatorStakingPool and operator gets updated.
Lead Judging Commences
`OperatorStakingPool::_withdraw()` function doesn't transfer the tokens
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.