Closed code423n4 closed 2 years ago
WatchPug
https://github.com/code-423n4/2022-01-yield/blob/e946f40239b33812e54fafc700eb2298df1a2579/contracts/ConvexStakingWrapper.sol#L321-L322
uint256 d_reward = bal - reward.reward_remaining; d_reward = d_reward + IRewardStaking(reward.reward_pool).earned(address(this));
Can be changed to:
uint256 d_reward = bal - reward.reward_remaining + IRewardStaking(reward.reward_pool).earned(address(this));
From readme:
Per the sponsor requirements, Invalid
Handle
WatchPug
Vulnerability details
https://github.com/code-423n4/2022-01-yield/blob/e946f40239b33812e54fafc700eb2298df1a2579/contracts/ConvexStakingWrapper.sol#L321-L322
Can be changed to: