Dria

Swan
NFTHardhat
21,000 USDC
View results
Submission Details
Severity: medium
Valid

Generators and validators will be unable to claim their fees if `LLMOracleCoordinator::withdrawPlatformFee` is called beforehand.

The withdrawPlatformFee function in LLMOracleCoordinator enables the owner to withdraw the entire balance of the contract (in terms of feeToken), which may encompass fees earned by generators and validators. If this function is called before any generators or validators collect their fees, they will be unable to claim their earnings.

To mitigate this risk, it is advisable to modify the withdrawPlatformFee function to withdraw only the platform fees. Additionally, introduce a separate function for withdrawing the entire balance in case of an emergency.

Updates

Lead Judging Commences

inallhonesty Lead Judge
12 months ago
inallhonesty Lead Judge 12 months ago
Submission Judgement Published
Validated
Assigned finding tags:

`withdrawPlatformFees` withdraws the entire balance

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.