Submission Details
Severity:
No Check on canWithdraw Amount in `StakingPool::strategyWithdraw` Function
Summary
The strategyWithdraw function allows withdrawal of any amount regardless of canWithdraw from strategies, which shouldn't be the case.
Vulnerability Details
The strategyWithdraw function allows withdrawals even if the strategy has less than the minimum deposit amount. As per the functionality, if a strategy's balance is below the minimum deposit amount, it shouldn't allow further withdrawals.
Impact
Allowing withdrawals even after the strategy's balance drops below the minimum deposit amount.
Tools Used
Manual Review
Recommendations
Check the canWithdraw amount before withdrawing from the strategy.
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
2,53020 USDC / LOC
42,000 USDC
4,250 USDC
3,750 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.