Description:
The Staking contract has been paused to prevent malicious use of the information disclosed by this BIP.
If approved, this proposal will upgrade the Staking Logic contract to an implementation that fixes the bug.
Details:
A bug in the Staking Contract was discovered. The bug allows any address to revert any delegated voting power back to the delegator’s address by staking any amount to the delegator’s address. We have reproduced the bug and confirmed this is unintended behavior.
Implementation:
BabelFish uses fork of Sovryn’s Bitocracy. With BIP-0004 it was updated to the same version as the one used currently by Sovryn. Therefore the same fix needs to be applied - adding conditional check to fix the vulnerability