Summary
TempleGold.setVestingFactor()will change the vesting factory without first minting the already accumulated amount
Let's look at an example with the following:
MAX_SUPPLY = 300_000e18
Vesting factory = 1/(3 years)
If 1 year passes and the vesting factor is updated to 1/(4 years), since the code currently doesn't call mint()
before updating, the minted amount will be 75_000e18 even though it should have been 100_000e18.
In contrast, if mint()
was called before updating, 100_000e18 tokens would have been minted and the vesting process would have continued with the new vesting fraction from there on.
Inconsistent vesting rates.
Manual Review
Call mint()
before updating the vesting fraction
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.