Submission Details
Severity:
timestamp
Vulnerability Details
Distribution.claim(uint256,address) uses timestamp for comparisons
159: require(block.timestamp > pool.payoutStart + pool.claimLockPeriod, "DS: pool claim is locked");
163: require(pendingRewards_ > 0, "DS: nothing to claim");
Impact
Dangerous usage of block.timestamp. block.timestamp can be manipulated by miners.
Recommendations
Avoid relying on block.timestamp.
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.