Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Aura Finance>Threat Models>Function: stakeFor(address _for, uint256 _amount)
GeneralOverview
DiscussionThe protectAddPool is unsafeWithdrawal of funds from a shut down pool
Threat ModelsWhat are threat models?AuraBalProxyOFT.sol
AuraBalRewardPool.solFunction: stake(uint256 _amount)Function: stakeAll()Function: stakeFor(address _for, uint256 _amount)Function: withdraw(uint256 amount, bool claim, bool lock)
AuraOFT.solAuraVestedEscrow.solBaseRewardPool4626.solBoosterLite.solExtraRewardsDistributor.solL1Coordinator.solPausableOFT.solPausableProxyOFT.solPoolManagerLite.solVirtualBalanceRewardPool.sol
Audit ResultsAudit Results

Function: stakeFor(address _for, uint256 _amount)

The same function as stake, but _balances, rewards, and userRewardPerTokenPaid is updated for the _for address provided by caller. The stakingTokens are transferred from the caller address.

Zellic © 2025Back to top ↑