All reports
mediumLogic errorEVM-Solidity

MagicSea - the native DEX on the IotaEVM: `MlumStaking::addToPosition` should assing the amount multiplier based on the new lock duration instead of initial lock duration.

Payout
$0
Protocol
MagicSea - the native DEX on the IotaEVM
Disclosed
Jul 11, 2024
Source
sherlock

MagicSea's MlumStaking staking contract computes a position's lock multiplier from the initial lock duration instead of the recalculated amount-weighted lock duration when a user calls addToPosition. Once a deposit's remaining lock time reaches zero, that term …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.