Skip to content

Conversation

@arr00
Copy link
Contributor

@arr00 arr00 commented Nov 19, 2025

Remove the recipient for unstake requests from ProtocolStaking (and the respective events). This mitigates an issue where any account can unstake 0 tokens on behalf of a given user. This is problematic if the cooldown period is decreased.

The flow of requesting a redemption of 0 shares is modified in OperatorStaking such that execution terminates early. Users must withdraw non-zero amount to affect any state.

Docs are also updated to increase clarity.

@cla-bot cla-bot bot added the cla-signed label Nov 19, 2025
melanciani
melanciani previously approved these changes Nov 20, 2025
jatZama
jatZama previously approved these changes Nov 20, 2025
@arr00 arr00 dismissed stale reviews from jatZama and melanciani via fec0e2f November 20, 2025 20:21
@arr00 arr00 marked this pull request as ready for review November 24, 2025 16:06
@arr00 arr00 requested a review from a team as a code owner November 24, 2025 16:06
jatZama
jatZama previously approved these changes Nov 24, 2025
Copy link
Member

@jatZama jatZama left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants