Submission Details
Severity:
Unfair Advantage in WETH Reward Claims
Summary
The withdraw function lacks any time restriction
Vulnerability Details
The withdraw function lacks any time restriction, allowing users to front-run the reward update when they detect an increase in WETH rewards in the pool. This enables them to quickly deposit funds and call the withdraw function to withdraw the increased rewards.
Impact
Unfair Advantage in WETH Reward Claims
Tools Used
Vscode
Recommendations
To address this issue, proper access controls and/or time restrictions should be implemented in the withdraw function.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.