According to the issue submission, the only component affected is the StargateRewardableWrapper. There is no logic to be used under the emergency, such as emergencyWithdraw.
And the mitigation added the stakingContract.emergencyWithdraw(poolId) to the StargateRewardableWrapper when the poolInfo.allocPoint == 0.
So it can rescue funds without caring about rewards.
Lines of code
Vulnerability details
comments
According to the issue submission, the only component affected is the StargateRewardableWrapper. There is no logic to be used under the emergency, such as
emergencyWithdraw
.And the mitigation added the
stakingContract.emergencyWithdraw(poolId)
to theStargateRewardableWrapper
when thepoolInfo.allocPoint == 0
.So it can rescue funds without caring about rewards.