All reports
mediumLogic errorEVM-Solidity

Covalent: OperationalStaking::_unstake Delegators can bypass 28 days unstaking cooldown when enough rewards have accumulated

Payout
$0
Protocol
Covalent
Disclosed
Jan 26, 2024
Source
sherlock

Covalent's OperationalStaking contract distributes rewards evenly across all shares held for a validator, and redeeming rewards burns the equivalent shares. Because shares are burned rather than rewards tracked separately, a delegator can unstake rather than r …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.