Submission Details
Severity:
Insufficient Logic in the Distribution::_validatePool() function
Summary
in the _validatePool function you have only one require statement as below
require(pool_.decreaseInterval > 0, "DS: invalid decrease interval");
this is not sufficient as Validation checks are important for preventing vulnerabilities in your contract
Vulnerability Details
for example Without proper validation, if withdrawLockPeriod is set to a value less than or equal to the current timestamp, users might be able to withdraw immediately. This could undermine the intended lock period,
you can validate it as follows
require(pool_.withdrawLockPeriod > block.timestamp, "DS: invalid withdraw lock period value");
Tools Used
manual analysis
Recommendations
add more checks in the validate pool
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.