The withdrawPlatformFees function will withdraw all of the fee tokens in the contract. This can include fees for generators and validators.
When the owner of the contract calls withdrawPlatformFees
, it withdraws the entire balance of the contract. The problem with this is that there could be fees still in the contract for generators and validators.
Rewards for generators and validators are granted through an allowance. Even if they were to automate the process and auto withdrawal on token approval, there is still the possibility the withdraw function could contain rewards.\
If this function were to be called while there are still fee tokens, generators and validators may have allowances for an amount not available in the contract.
Generators and validators can lose fees
Manual Review
There needs to be a separate variable to track how much protocol fees have been accrued that are eligible to claim.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.