ghostchain/ghost-dao-contracts
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

https://ghostforum.org/t/ghost-dao-contracts-external-deposit-lock-bypassed-by-unstake-wrap-unwrap-variant-of-daffh-135/173

Browse Source 
Signed-off-by: Uncle Fatso <uncle.fatso@ghostchain.io>
This commit is contained in:
Uncle Fatso 2026-10-16 17:53:25 +03:00
parent f7e28ad2fb
commit 12a3420657
Signed by: f4ts0
GPG Key ID: 565F4F2860226EBB
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/Staking.sol
View File

@ -132,8 +132,9 @@ contract GhostStaking is IStaking, GhostAccessControlled {
bool isTrigger, bool isTrigger,
bool isRebase bool isRebase
) external override returns (uint256) { ) external override returns (uint256) {
uint256 extraAmount = isTrigger ? this.rebase() : 0; if (!unlocks[to] && to != msg.sender) revert ExternalDepositsLocked();
uint256 extraAmount = isTrigger ? this.rebase() : 0;
if (isRebase) { if (isRebase) {
amount += extraAmount; amount += extraAmount;
ISTNK(stnk).safeTransferFrom(msg.sender, address(this), amount); ISTNK(stnk).safeTransferFrom(msg.sender, address(this), amount);
@ -152,6 +153,7 @@ contract GhostStaking is IStaking, GhostAccessControlled {
address to, address to,
uint256 amount uint256 amount
) external override returns (uint256 balance) { ) external override returns (uint256 balance) {
if (!unlocks[to] && to != msg.sender) revert ExternalDepositsLocked();
ISTNK(stnk).safeTransferFrom(msg.sender, address(this), amount); ISTNK(stnk).safeTransferFrom(msg.sender, address(this), amount);
balance = IGHST(ghst).balanceTo(amount); balance = IGHST(ghst).balanceTo(amount);
IGHST(ghst).mint(to, balance); IGHST(ghst).mint(to, balance);
@ -161,6 +163,7 @@ contract GhostStaking is IStaking, GhostAccessControlled {
address to, address to,
uint256 amount uint256 amount
) external override returns (uint256 balance) { ) external override returns (uint256 balance) {
if (!unlocks[to] && to != msg.sender) revert ExternalDepositsLocked();
IGHST(ghst).burn(msg.sender, amount); IGHST(ghst).burn(msg.sender, amount);
balance = IGHST(ghst).balanceFrom(amount); balance = IGHST(ghst).balanceFrom(amount);
ISTNK(stnk).safeTransfer(to, balance); ISTNK(stnk).safeTransfer(to, balance);