mediumAccess controlEVM-Solidity
Covalent: `validatorMaxStake` can be bypassed by using `setValidatorAddress()`
- Payout
- $0
- Protocol
- Covalent
- Disclosed
- Jan 26, 2024
- Source
- sherlock
Covalent's validator migration function, `setValidatorAddress()`, merges the old validator address's staked shares and staked amount onto the newly chosen address without re-checking the protocol's `validatorMaxStake` cap. Because the new address may already h …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.