mediumAccess controlEVM-Solidity
MagicSea - the native DEX on the IotaEVM: Rewards might get stuck when approved actor renews a position
- Payout
- $0
- Protocol
- MagicSea - the native DEX on the IotaEVM
- Disclosed
- Jul 11, 2024
- Source
- sherlock
MagicSea's MlumStaking staking contract routed accrued reward tokens inconsistently across its position-management functions. The public harvestPosition pays the NFT owner, but renewLockPosition and extendLockPosition both delegate to the internal _lockPositio …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.