Dria

Summary

The _increaseAllowance function increments the allowance for validators and generators to claim their fees; however, no function exists to allow these actors to actually withdraw or transfer the allocated funds. As a result, validators and generators may be unable to claim their earned fees directly

Vulnerability Details

The _increaseAllowance function updates allowances by incrementing them, but without a corresponding function to withdraw or transfer the allocated fees, validators and generators cannot access their funds.

Impact

Validators and generators are unable to claim their fees even after successful validation or generation tasks. This disrupts the incentive mechanism for validators and generators, leading to a lack of usability for the contract as they cannot access their earned funds.

Tools Used

Manual code review

Recommendations

Add a function allowing authorized validators and generators to withdraw their fees. This function should check the current allowance and transfer the corresponding funds to the caller’s address.