StRSR.stake function can be called by anyone at any time, even if system is frozen. In this case, rewards are not distributed among current stakers. This will be done only after unfrozing. Because of that all new added stakers that staked at frozen state, will receive portion of rewards for previous period of time, when they didn't stake yet.
How it was fixed
Currently, rewards are paid at any state of system: frozen/unfrozen. Because of that Reserve team provides fair distribution of rewards for all stakers.
Lines of code
Vulnerability details
This issue is mitigated.
Explanation of found problem
StRSR.stake function can be called by anyone at any time, even if system is frozen. In this case, rewards are not distributed among current stakers. This will be done only after unfrozing. Because of that all new added stakers that staked at frozen state, will receive portion of rewards for previous period of time, when they didn't stake yet.
How it was fixed
Currently, rewards are paid at any state of system: frozen/unfrozen. Because of that Reserve team provides fair distribution of rewards for all stakers.