Summary

The withdrawPlatformFees function might withdraw fees that do not belong to the owner. This could result in the node having no fees to withdraw.

Vulnerability Details

Background:

1. When distributing fees to node nodes, the process is done through approve rather than direct transfer.

2. The withdrawPlatformFees function withdraws all funds from the contract, including funds that have not been claimed by the nodes. The owner cannot ensure that each node withdraws their funds in a timely manner.

Impact

This means that even though nodes have authorization, there may not be enough funds for them to withdraw.

Tools Used

manual

Recommendations

To record the amount of platform fees and only withdraw the platform fees.