persistenceOne / pStake-bugBounty

This repository is to record issues reported for the pStake bug bounty program.
3 stars 2 forks source link

Smart contract error. I managed to withdraw stkAtom tokens twice. Now I will definitely win the competition :) #38

Open IgorGer55 opened 3 years ago

IgorGer55 commented 3 years ago

Describe the bug Smart contract error. I managed to withdraw stkAtom tokens twice

To Reproduce Steps to reproduce the behaviour:

  1. Go to https://gala.pstake.finance/stake
  2. Select the maximum amount. Click on unstake button
  3. Confirm the transaction in metamask.
  4. After that, do not close the service page and do not disconnect the wallet. You need to go surf other sites.
  5. After 10 minutes, they will return to the https://gala.pstake.finance/stake tab again and the funds will be debited from the staking again. I'm not sure for everyone, but it happened to me. At the same time, no confirmation was required to metamask.

Expected behaviour The user will be delighted! He doubled his deposit + staking!

Screenshots alt text

Desktop (please complete the following information):

Additional context We urgently need to solve this problem.

Ethereum address 0xCf7FB3AdC0A9A4E6F7Caff2ca8C365325Fd19277

Criticality Assessment Please pick one:

Checklist