-
fandonov
high
# The user will be able to get more rewards than he is supposed to get.
## Summary
The user will get much more funds from the rewards than he is supposed to get and this will drain th…
-
# Lines of code
https://github.com/code-423n4/2024-06-vultisig/blob/cb72b1e9053c02a58d874ff376359a83dc3f0742/src/ILOPool.sol#L259
# Vulnerability details
## Impact
When an eligible user calls the…
-
Bauer
high
# Front-running `notifyUnseenReward()` to steal rewards from the protocol
## Summary
The `notifyUnseenReward()` function is used to distribute rewards to users in the protocol. However,…
-
valentin2304
high
# staker is able to drain contract`s rewards
## Summary
staker is able to drain contract`s rewards, because of missing logic in `getReward` function by calling it several times
#…
-
Issue
-
## Feature Description
GA events (eg. `trackEvent` calls) should be added to the new "Top Earnings Pages" widget that tracks an event any time the user views the "Top earning pages" widget on the d…
-
9oelm
medium
# Revoking a vesting schedule underrepresents `_totalSupply` of vestZVE contract, causing the earnings to be unfairly distributed.
## Summary
Zivoe Labs can create a vesting schedule …
-
DenTonylifer
high
# Acumulated reward never decreases
## Summary
Acumulated reward never decreases, causing incorrect reward calculations.
## Vulnerability Detail
Claiming a reward involves calling…
-
dany.armstrong90
high
# `ZivoeYDL.sol#unlock`: `lastDistribution` is initialized mistakenly.
## Summary
`ZivoeYDL.sol#unlock` function initialize `lastDistribution` mistakenly: `lastDistribution = …
-
Streamflow introduces several changes into the protocol architecture that impact how token holders will stake in the network.
**Context**
We built the Livepeer Explorer as a decentralized applica…