Skip to content

Commit b1a72ba

Browse files
committed
update - replace 'exploit' by 'vulnerability'
1 parent b18c608 commit b1a72ba

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

SIP-0044.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Created: 2022-04-07
1313

1414
The Staking contract has been paused to prevent malicious use of the information disclosed by this SIP.
1515

16-
If approved, this proposal will upgrade the Staking contract to an implementation that prevents a critical exploit.
16+
If approved, this proposal will upgrade the Staking contract to an implementation that prevents a critical vulnerability.
1717

1818
The chosen mitigation strategy restricts the ability for an attacker to creatively combine calls in a single block or create loops which could potentially be harmful, while not hindering the normal usage and composability of the contract.
1919

@@ -26,7 +26,7 @@ Fixing the underlying causes is a large undertaking, requiring a partial rewrite
2626

2727
## Details
2828

29-
In order to close the exploit and its various variants, we have opted for a mitigation strategy that thwarts them by forbidding a number of scenarios which we think have no real practical use for the users, while being necessary to enable the exploit. Namely, if this SIP is approved, it will forbid a number of actions from happening **in the same block** as a call to the `stake(...)` function, for the same `lockDate` timestamp:
29+
In order to close the vulnerability and its various variants, we have opted for a mitigation strategy that thwarts them by forbidding a number of scenarios which we think have no real practical use for the users, while being necessary to enable the exploit. Namely, if this SIP is approved, it will forbid a number of actions from happening **in the same block** as a call to the `stake(...)` function, for the same `lockDate` timestamp:
3030
- extend staking duration,
3131
- delegate voting power (which can still be done directly in the `stake(...)` function call as a parameter),
3232
- withdraw,

0 commit comments

Comments
 (0)