All reports
mediumLogic errorEVM-Solidity

MorphL2: Delegators can lose their rewards when a delegator has removed a delegatee and claims all of his rewards before delegating again to a previous removed delegatee.

Payout
$0
Protocol
MorphL2
Disclosed
Sep 23, 2024
Source
sherlock

MorphL2's Distribute reward contract contains two interacting faults that let a delegator lose earned staking rewards permanently, even when following the intended flow. The first is in claimAll, which iterates over the delegatees EnumerableSet while _claim re …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.