mediumLogic errorOther
Andromeda – Validator Staking ADO and Vesting ADO: Lockup of vestings or completion time can be bypassed due to missing check for staked tokens
- Payout
- $0
- Protocol
- Andromeda – Validator Staking ADO and Vesting ADO
- Disclosed
- Jun 23, 2024
- Source
- sherlock
Andromeda's Vesting ADO tracks each vesting in a Batch struct that records total amount and amount_claimed but never tracks how many tokens have been staked to a delegator. Because all batches share a single recipient and one pooled contract balance, claim_bat …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.