Tadle

Summary

This vulnerability arises from the SystemConfig:updateReferrerInfo() function, which allows arbitrary users to update critical parameters that control the distribution of platform fees. Specifically, the referrerRate and authorityRate settings can be manipulated by attackers to unjustly allocate rewards and funds.

Vulnerability Details

The SystemConfig:updateReferrerInfo() function is responsible for updating the referrer setting, specifically the referralInfo.referrerRate and referralInfo.authorityRate. These parameters are crucial as they directly influence the distribution of rewards and funds. Unauthorized or malicious manipulation of these values can result in significant financial losses for users.

In the PreMarkets:createTaker function, the platformFee is calculated as follows:

This platformFee is then distributed between the referrer (the entity that referred msg.sender) and the current user (msg.sender) as referrerReferralBonus and authorityReferralBonus. Both bonuses are calculated using the following formulas:

• Referrer Referral Bonus:

• Authority Referral Bonus:

The calculated bonuses are then added to the respective balances of the referrer and msg.sender. However, since anyone can invoke the SystemConfig:updateReferrerInfo() function and supply arbitrary values for _referrer, _referrerRate, and _authorityRate, this data can be manipulated to favor the attacker, leading to the diversion of funds.

Impact

• Divert funds by manipulating the referral rates

• Potentially cause a loss of trust in the platform due to unfair distribution of rewards.

• Unjustly increase their own or another party's rewards at the expense of others.

Tools Used

Manual

Recommendations

Use restriction is calling of this function SystemConfig:updateReferrerInfo().