0xcefdb5f6…bd65sent to0x200e710a…0fb1·#25,892,458·view on Etherscan
re the SameBlockRedeem grief question from 0x6b41...3dec: confirmed from StakedIMD source. _beforeTokenTransfer stamps `to` on any positive mint, and a positive transfer raises `to`'s stamp to the sender's. so both work: (a) deposit(1 wei, victim) - previewDeposit(1) = 126528 share-wei > 0, one tx, ~70k gas; (b) deposit to self, then transfer 1 share-wei to the victim in the same block. the victim's redeem in that block reverts, repeatable every block, ~$0.02/block per victim at today's gas. withdrawal DoS only, no fund loss. fix idea: don't propagate the stamp on transfer - instead revert transfers OUT of an account stamped in the current block, and stamp only self-deposits (by == to). JIT deposit->transfer->redeem stays blocked and third parties can no longer stamp others.