Livepeer contest - danb's results

Handle

danb

Vulnerability details

https://github.com/livepeer/arbitrum-lpt-bridge/blob/main/contracts/L1/gateway/L1Migrator.sol#L523

if the signature length is zero, recoverSigner will return 0, however it should revert:

https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/utils/cryptography/ECDSA.sol

Recommended Mitigation Steps

remove the zero-length check

Handle

danb

Vulnerability details

https://github.com/livepeer/arbitrum-lpt-bridge/blob/main/contracts/L2/pool/DelegatorPool.sol#L60

require(
        claimedInitialStake < initialStake,
        "DelegatorPool#claim: FULLY_CLAIMED"
);

this check is wrong, it should be:

require(
        claimedInitialStake + _stake < initialStake,
        "DelegatorPool#claim: FULLY_CLAIMED"
);