Changes in the LinearBoostController will break accounting
Summary
Changes in the LinearBoostController will break accounting.
Vulnerability Details
LinearBoostController has ability to change maxBoost and maxLockingDuration. Both of these params have significant impact on boost calculation.
Once boost is calculated, then it will not be recalculated until user would like to change something. This means that when maxBoost or maxLockingDuration will be changed, then new locks will start using new values, while old locks will still use their boost calculated before.
It is possible that after some changes pool will stop working at all as his accounting of effective balance will be broken.
Impact
Effective balance calculation is broken.
Tools Used
VsCode
Recommendations
Do not allow modify maxBoost and maxLockingDuration.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.