58310 sc low strategy fluidarbusdcstrategy cant claim fluid token reward

Submitted on Nov 1st 2025 at 06:35:40 UTC by @farismaulana for Audit Comp | Alchemix V3arrow-up-right

  • Report ID: #58310

  • Report Type: Smart Contract

  • Report severity: Low

  • Target: https://github.com/alchemix-finance/v3-poc/blob/immunefi_audit/src/strategies/arbitrum/FluidARBUSDCStrategy.sol

  • Impacts:

    • Permanent freezing of unclaimed yield

    • Permanent freezing of unclaimed royalties

Description

Brief/Intro

Fluid protocol itself provide a reward system that is rewarding its user each cycle specified. The issue is that the FluidARBUSDCStrategy is not overriding the MYTStrategy reward claim function, making the strategy unable to claim this provided rewards from Fluid protocol.

Vulnerability Details

MYTStrategy already provided claimRewards function, but it is not overrided inside FluidARBUSDCStrategy . the function claimRewards can be called but would do nothing. the details can be seen in the PoC section.

Impact Details

potential protocol and user losses because the reward cannot be claimed.

References

https://arbiscan.io/tx/0x987f844560da00da506d88ee0f4d9de2364c907f64d4b2a07426f8e3bd95d532

https://github.com/alchemix-finance/v3-poc/blob/a192ab313c81ba3ab621d9ca1ee000110fbdd1e9/src/strategies/arbitrum/FluidARBUSDCStrategy.sol#L16-L55

Proof of Concept

Proof of Concept

the setup needs merkle proof, that we generate using this file:

the output is used on the PoC. the necessary data is already pasted into the PoC. just apply the diff:

we run on specific block fork forge test --fork-url https://arbitrum.gateway.tenderly.co --fork-block-number 395303779 --mt test_fluidStrategyCantClaimRewards

the result would be the strategy is having 50e18 fluid token as reward but by using the MYTStrategy::claimRewards that is not overrided, it cant be claimed as shown that the balance is still 0. effectively this reward would be lost.

Was this helpful?