See summary info 👁️ℹ️
🔗 Competition details on CodeHawks: click here
According to the developers:
stake.link is a first-of-its-kind liquid delegated staking platform delivering DeFi composability for Chainlink Staking. Built by premier Chainlink ecosystem developer LinkPool, powered by Chainlink node operators, and governed by the stake.link DAO, stake.link's extensible architecture is purpose-built to support Chainlink Staking and to extend participation in the Chainlink Network.
- Experience and knowledge. 😄
- $2917.81 💸
- Experience.
Check the findings' reports I submitted:
- 🔗 Medium3-V1OperatorsCantMigrate (
Downgraded to Low) - 🔗 Low3-DepositIndexIncorrectUsageAtMaxDepositsUpdate
⚠️ I did not check in depth all invalidation reasons. I considered my time to be more valuable if spent on other things like in real life DevCon 2024. Still, as talked with my teamate, the judging of this contest felt a bit rushed, messed and shallow, so I'm afraid some of these invalidations might be actually valid.⚠️
- 🔗 Low1-SystemWontWorkInMainnet
- 🔗 Low2-MultiStrategyWithdrawalsCanRevert
- 🔗 Critical1-AnyonCanForfeitSystemsRewards (
Invalid) - 🔗 Medium1-TheSystemUnderminesCLStakingIncetives
- 🔗 Medium2-VCSUnsafeProxyUpgrades
- 🔗 Medium5-SandwichStealsDepositRoom
- 🔗 Medium6-IncorrectGroupCalulationInOperatorVCSDuringRemoval
- 🔗 Medium7-WithdrawalsWithdrawMoreThanSpecified
- 🔗 Low4-TotalDepositRoomOfGroupsAccountsForNonGroupVaults