mediumFront-running / MEVEVM-Solidity
Covalent: New staking between reward epochs will dilute rewards for existing stakers. Anyone can then front-run `OperationalStaking.rewardValidators()` to steal rewards
- Payout
- $0
- Protocol
- Covalent
- Disclosed
- Jan 26, 2024
- Source
- sherlock
Covalent's OperationalStaking distributes validator rewards via rewardValidators(), which is callable only by the staking manager. The function weights all current stakes equally regardless of when within the epoch they were placed, so a stake made moments bef …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.