Symmio, Staking and Vesting audit contest

A public audit contest on Sherlock (staking), completed on 7th March 2025. 0xSimao placed #1. 2 of his findings are published: 2 medium.

What Symmio, Staking and Vesting is

Symmio is a permissionless OTC derivatives protocol and clearing layer. SYMM is its governance token, and the peripheral contracts around it handle staking, vesting and distribution.

Scope

The SYMM token's staking, vesting and distribution contracts.

Medium severity findings

• Bad check in Vesting.sol::_resetVestingPlans will prevent users from adding additional liquidity in SymmVesting.sol
• Double spending attack in the Vesting contract

The contest

View the contest page