mediumLogic errorEVM-Solidity
MorphL2: Delegators can lose their rewards when a delegator has removed a delegatee and claims all of his rewards before delegating again to a previous removed delegatee.
- Payout
- $0
- Protocol
- MorphL2
- Disclosed
- Sep 23, 2024
- Source
- sherlock
MorphL2's Distribute reward contract contains two interacting faults that let a delegator lose earned staking rewards permanently, even when following the intended flow. The first is in claimAll, which iterates over the delegatees EnumerableSet while _claim re …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.