mediumLogic errorEVM-Solidity
Covalent: Validator cannot set new address if more than 300 unstakes in it's array
- Payout
- $0
- Protocol
- Covalent
- Disclosed
- Jan 26, 2024
- Source
- sherlock
Covalent's CQT OperationalStaking contract lets a validator rotate its operator address via setValidatorAddress(), but the function only copies over the validator's accumulated Unstaking array and reverts if that array exceeds 300 entries, while no in-scope fu …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.