code-423n4 / 2022-01-sherlock-findings

0 stars 0 forks source link

Implementation is not align with documentation #88

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Handle

wuwe1

Vulnerability details

Proof of Concept

https://github.com/code-423n4/2022-01-sherlock/blob/main/contracts/Sherlock.sol#L28

https://github.com/code-423n4/2022-01-sherlock/blob/main/contracts/Sherlock.sol#L621

The implementation of _calcSharesForArbRestake doesn’t consistent with documentation.

The "reward" for an arbitrager increases slowly over the course of 2 weeks

According the document https://docs.sherlock.xyz/stakers/lockup-period#unstaking, the ARB_RESTAKE_GROWTH_TIME should be two weeks.

Recommended Mitigation Steps

Modifier documentation or implementation.

Evert0x commented 2 years ago

0 non critical