Submitted by gjaldon, also found by joestakey, jasonxiale, 0xMirce, Kumpa, Kenshin, rvierdiiev, and chaduke
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/vault/VaultController.sol#L108-L110 
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/vault/VaultController.sol#L448
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardStaking.sol#L112 
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardStaking.sol#L127
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardStaking.sol#L141
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardStaking.sol#L170
https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardStaking.sol#L373
This allows attackers to disable any Staking contract deployed via the system, essentially locking up all funds within the Staking contract. It would lead to a significant loss of funds for all users and the protocol who have staked their Vault tokens. All Staking contracts can be disabled by an attacker. The attack is possible once vault deployments become permissionless which is the primary goal of the Popcorn protocol.
The attack is possible because of the following behaviors:
First, verifyCreatorOrOwner needs to be fixed so that it allows either creator or owner to run functions it protects like its meant to with the below code:
Once this fix is implemented and the protocol enables permissionless vault deployment, the following attack path opens up:
The steps for described attack can be simulated with the below test that will need to be added to the VaultController.t.sol test file:
Please be reminded to fix verifyCreatorOwner first before running the above test. Running the test above will cause the call to Staking.deposit to revert with an Arithmetic over/underflow error which shows that the Staking contract has successfully been DOSd. The following is the command for running the test:
VS Code, Foundry
RedVeil (Popcorn) confirmed 
LSDan (judge) decreased severity to Medium 
