Open hats-bug-reporter[bot] opened 1 month ago
POC, please
The amount that is added on top of the user's balance is their reward and does not leave mVeNFT with less than expected, other users' funds do not suffer.
At the exit, the user receives his balance that he has wagered + the accumulated reward, which is added to his mVeNFT, so it looks like everything is fine
Github username: -- Twitter username: -- Submission hash (on-chain): 0xfe2405a8dfdb4e8e8c5943166e13b80fee6decd723c47f9edcc7f89e4024a72d Severity: medium
Description: Description\ When we attach our tokens to the managed our locked balance is added to the managed token in
VotingEscrowUpgradeableV1_2::onAttachToManagedNFT
and then additionally attach our token to one of the Strategies withManagedNFTStrategy::onAttach
function:But when we detach the order is inversed, first
ManagedNFTStrategy::onDetach
is called which harvests the position andlockedRewards
are added to the initial amount:and then
onDettachFromManagedNFT
is called which will decrease more than the added amount, leaving the managed nft with lower locked amount than initially.Attack Scenario\ Describe how the vulnerability can be exploited.
Attachments