code-423n4 / 2023-09-reserve-mitigation-findings

0 stars 0 forks source link

M-05 MitigationConfirmed #40

Open c4-submissions opened 1 year ago

c4-submissions commented 1 year ago

Lines of code

Vulnerability details

comments

According to the issue submission, the only component affected is the StargateRewardableWrapper. There is no logic to be used under the emergency, such as emergencyWithdraw.

And the mitigation added the stakingContract.emergencyWithdraw(poolId) to the StargateRewardableWrapper when the poolInfo.allocPoint == 0.

So it can rescue funds without caring about rewards.

c4-judge commented 1 year ago

thereksfour marked the issue as satisfactory

c4-judge commented 1 year ago

thereksfour marked the issue as nullified

c4-judge commented 1 year ago

thereksfour marked the issue as confirmed for report

c4-judge commented 1 year ago

thereksfour marked the issue as satisfactory