Liquid Staking

Summary

First user to deposit into staking pool must deposit at least 1000 wei but next users can deposit as little as 1 wei causing unfair deposit requirement, minor loss of fund, and minor DOS for first user.

Vulnerability Details

The staking pool does not allow first deposit to be less than 1000 wei to combat vault inflation attack. While this is fine, the first depositor that tries to deposit less than 1000 wei will receive arithmetic error which will make the first depositor think the staking pool is not working. Then, when they try to increase the deposit 1 wei to 10 wei to 100 wei and finally 1000 wei it succeeds but it is not reflected in their share, the share is still 0.

Impact

• First depositor lose 1000 wei

• Unfair deposit requirement for first depositor

• Minor DOS for first depositor

Tools Used

Manual Review

Recommendations

Add a require statement with descriptive error so that first depositor does not get the wrong idea. Alternatively give some kind of reward to recompensate for the loss of fund for first depositor.