code-423n4 / 2024-07-reserve-validation

0 stars 0 forks source link

a user can stake rsr just before a reset vote against any reset #212

Closed c4-bot-8 closed 1 month ago

c4-bot-8 commented 1 month ago

Lines of code

https://github.com/code-423n4/2024-07-reserve/blob/3f133997e186465f4904553b0f8e86ecb7bbacbf/contracts/p1/StRSR.sol#L490

Vulnerability details

vulnerability details

Voting is a critical component of governance in the Reserve Protocol, allowing RSR holders to influence decisions about RTokens and protocol changes Any holder of the minimum required amount of RSR can create a proposal.however just a before a reset a user can grief this situation by staking enough rsr to vote against any reset

impact This can create issues for the protocol when making important decisions regarding its operations

mitigation

Do not grant voting power to stakers who have staked recently implement a delay before they receive voting power

Assessed type

Context