Submission Details
Severity:
`Distribution.editPool()` doesn't check `pool_.payoutStart > block.timestamp` like the `Distribution.createPool()`
Summary
Distribution.createPool() checks if pool_.payoutStart > block.timestamp to revert on invalid payout start value but in editPool() it updates the pool_.payoutStart without checking which can be use to set invalid payout starttime
Vulnerability Details
see summary
Impact
Invalid payout start value can be set for pool.payoutStart
Tools Used
Manual
Recommendations
Add a check in editPool that revert the txn for invalid edit params
Updates
Lead Judging Commences
inallhonesty
over 1 year ago
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
`editPool` function doesn't do the payoutStart check
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.