Low Findings
Possible Race Condition
Severity: Low
Ecosystem: Sui
Protocol: Haedel LSD
Auditor: OtterSec
Report:
https://ottersec.notion.site/Sampled-Public-Audit-Reports-a296e98838aa4fdb8f3b192663400772
Report Date: Nov 2023
Description: The vulnerability originates from a potential race condition during the transition between epochs, which arises when a user executes claim_coinbefore the program approves the corresponding EpochClaim object for the current epoch. Thus, if the claiming occurs before the approval, claim_epoch_record may not decrease the value of ue.amount as expected because ue.approved will be set to false.