code-423n4 / 2021-07-sherlock-findings

0 stars 0 forks source link

getInitialUnstakeEntry when unstakeEntries is empty #92

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

pauliax

Vulnerability details

Impact

When the address has no unstake entries function getInitialUnstakeEntry still returns 0 index. This function is external but can still confuse the outside consumers.

Recommended Mitigation Steps

Consider requiring ps.unstakeEntries[_staker].length > 0;