highLogic errorEVM-Solidity
Telcoin Platform: `StakingRewardsManager::topUp(...)` Misallocates Funds to `StakingRewards` Contracts
- Payout
- $0
- Protocol
- Telcoin Platform
- Disclosed
- Jan 15, 2024
- Source
- sherlock
The `StakingRewardsManager::topUp()` function iterates over a caller-supplied `indices` array but mistakenly reads from `stakingContracts[i]` (the loop counter) instead of `stakingContracts[indices[i]]`. As a result, rewards are always distributed to the first …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.