highLogic errorEVM-Solidity
MagicSea - the native DEX on the IotaEVM: Voting does not take into account end of staking lock period
- Payout
- $0
- Protocol
- MagicSea - the native DEX on the IotaEVM
- Disclosed
- Jul 11, 2024
- Source
- sherlock
MagicSea's Voter contract lets holders of MlumStaking positions cast votes that steer LUM emissions to pools. The vote() function checks each position's initial lock duration and remaining lock duration against fixed minimums, but never verifies that the posit …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.