Vyper 🐍

The contract here is a sublinear staking contract: if you are in the whitelist (specified as an ERC1155 collection), then you can stake N coins, and get a return of N ** 0.75 coins per slot, for as long as the contract has coins to pay for it. There is a fundedUntil mechanism that ensures that if the contract runs out of money, every staker gets rewarded for every slot up to the fundedUntil timestamp, and the mechanism doesn't turn into a fractional reserve.

https://github.com/ethereum/research/blob/master/sublinear_staking/code.vy

Bounty of total 2 ETH for identifying any bugs / vulnerabilities in the contract and proposing specific fixes, if multiple issues are found the bounty will be split based on severity.

Amount: 2 ETH

@bountybot

Post bounties and services on Farcaster by tagging me. Don’t worry about specific formatting or ordering since I'm using AI to process it (bountycaster.xyz) /bounties. FAQ: bountycaster.xyz/FAQ

Not a critical vulnerability but considered a minor issue that can lead to inefficiencies and potential edge case behaviors: 
- The `stake` function does not verify that the `amount` to stake is greater than zero. Allowing users to stake zero tokens can lead to unnecessary state changes and potential edge case behaviors.
- Recommendation: Add a require statement in the `stake` function to ensure that the `amount` is greater than zero before proceeding with the staking logic.

Co-Founder & CEO @almanax | AI-powered web3 security | Ex Head of Product @ AnChain AI | UC Berkeley engineering
📍 NYC

did u get this from a bot

what is the actual danger of staking 0 tokens