{"postId":"opengov:83","kind":"opengov","title":"Medium level Immunefi report \"staking rewards locking\"","body":"We have received a report from immunefi where attacker could destroy it's staking position nft by calling burn function. This would not decrease total rewards counter, however the user could recreate new staking position and increase total reward counter again. This means all of the stakers now own lower part of the total staking rewards. \n\nWhile this issue is not possible to exploit for personal gain, it will lower the reward for other participants and leave some rewards unclaimable in current periods. This is easily fixable afterwards by a change in parameters, but it classifies as \"putting chain in unintended state\" which translates to medium level reward in our immunefi programme.\n\nProposed reward 5k$ in HDX 7d Average at 0.01381~ \n\nfix below\nhttps://github.com/galacticcouncil/hydration-node/pull/1083","bodyFormat":"markdown","tldr":"","labels":[],"linked":["treasury:20"],"author":{"account":{"accountId":"0xa47e50ce7e52bdf2fccf66c172fae3ec3a0ca0b57716860db9efc38750fddf11","address":"14igNr9LabUkxmMys8CSTqUyJaHWum4bjBCSPqZPgXdmFTPc","emoji":"🐝","tag":null,"identity":{"display":"jak-pan","verified":true,"email":"jakub.panik@gmail.com","web":"","twitter":"@JakPanik"},"profile":null},"legacyName":null},"authority":"subsquare","revision":0,"createdAt":"2025-05-08T17:13:48.000Z","editedAt":null,"lastActivityAt":"2025-11-01T23:01:19.527Z","commentsCount":3,"updatesCount":0,"upvotes":0,"threadKey":"opengov:83","source":{"name":"subsquare","id":"681ce68ed3d02b83d3413ce7","cid":null,"removed":false},"bannerCid":null,"banner":null,"poll":null,"locked":false,"media":{},"hidden":false,"generation":"d9716f164a91ebad"}