Phalcon: The TrustPad protocol was attacked due to several design flaws in the staking logic
Phalcon, a trading browser, claimed on social media X (formerly Twitter) that the TrustPad protocol was attacked due to several design flaws in the staking logic, namely manipulating the locking period through external calls from untrusted sources to obtain pending rewards. In the receiveUpPool function of the LaunchpadLockableStake contract, if an account is not locked, the depositLockStart time will be set. Then the attacker manipulates it to immediately deposit (through the receiveUpPool function) and withdraw to accumulate pending rewards. In addition, another function, stakePendingRewards, allows attackers to convert accumulated pending rewards into staked amounts, allowing them to extract staking rewards in the form of TPAD tokens in future transactions and sell tokens for profit.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Significant Bitcoin, Ethereum and Litecoin Move by US Giant Company
A major US company has announced that it will now accept various cryptocurrencies, including Bitcoin, from its customers.
Analysis Company Makes Prediction for Bitcoin After the US Election: “Even If Donald Trump Wins…”
Cryptocurrency analysis company QCP Capital made a new future prediction for the Bitcoin price in its statement.
What Will Happen to Sued Altcoins If SEC Chairman Changes After US Elections?
If Donald Trump becomes the US President and the SEC Chairman changes, what will be the future of the altcoins that have been sued?
AAVE breaks above $140