staking

Known staking vulnerabilities include precision loss in reward calculations, first staker advantage, late staker dilution, unstake reentrancy, lock bypass, and LSD depeg risks. A pattern library and audit checklist help identify these critical flaws during contract review.

Precision loss in reward-per-token accumulators occurs when division operations truncate token amounts, causing stakers to receive fewer rewards than expected. Auditing involves reviewing calculation order and scaling factors to prevent this distribution vulnerability.

Auditing multi-reward token staking requires verifying that reward-per-token accumulators correctly handle multiple distribution streams simultaneously, checking for dilution attacks, and ensuring late stakers are not unfairly penalized by accumulators.

When auditing boosted staking and lock periods, check for lock bypass vulnerabilities, reentrancy during unstaking, and manipulation of boosting parameters. A pattern library helps identify these common pitfalls in reward distribution contracts.

First staker advantage occurs when the initial staker can manipulate reward-per-token accumulators by depositing and immediately withdrawing, stealing rewards meant for future stakers. Auditing requires validating accumulator initialization and deposit logic.