Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2022/04/29 12:00 a.m.9 views

Function recoverERC20 in StakingRewards allows an owner to transfer out any token except stakingToken

Judge @GalloDaSballo has assessed the 1st item in QA Report 254 as Medium risk. The relevant finding follows: … Function recoverERC20 in StakingRewards allows an owner to transfer out any token except stakingToken. I see 2 problems with this: 1. It should also forbid transferring of rewardsToken,...

6.7AI score
SaveExploits0
Rows per page
Query Builder