Summary

Overplus_ amount aren't reset after they are withdrawn to L1sender contract

Vulnerability Details

In the Distribution::bridgeOverplus function, the overplus variable is not reset to zero after successful bridging of overplus_ tokens to the L1 network. This can lead to uncontrolled accumulation of overplus, potentially causing unexpected behavior.

Impact

All overplus_ would eventually become "stuck" after the first invoking of the bridgeOverplus function as the balance of the next overplus just adds to the one not reset. As a result, subsequent overplus amounts would accumulate, but they would not be able to be withdrawn as they exceed the available contract balance

Tools Used

Manual Review.

Recommendations

Update the variable overplus_ and reset the overplus_ variable to zero after successful bridging within the Distribution::bridgeOverplus function to ensure proper management of overplus and prevent any potential issues related to its uncontrolled accumulation.