In NFTXLPStaking.sol, deposit(), exit(), withdraw(),claimRewards() and other related functions that take a vaultID as parameter perform a pool existence check on the staking pool associated with that vaultID. However, balanceOf is missing a similar pool check.
This may result in returning an invalid balance of a non-existing or stale pool.
Recommend adding check require(pool.stakingToken != address(0), "LPStaking: Nonexistent pool); before L170.
- 0xKiwi (NFTX) confirmed
