·
This issue is a quite straightforward example of missing functionality that the protocol disregarding and is often a trivial finding, but also relates a bit to business logic so many people miss it.
The SummerVestingWalletEscrow mints xSUMR (governance power) when the user stakes to them, and locks the tokens in their SummerVestingWallet.
However, in the SummerVestingWallet there is the option to withdraw all the tokens, but the user will still be holding their minted Governance tokens, which will be left unbacked.
Conclusion
This finding would earn you $381, which is okay since it is super simple, the protocol team completely dismissed the Governance tokens that will be going around.