Summary

The _calculateBoost failed to check for the boostWindow

Vulnerability Details

The _calculateBoost did not take into account the boostState.boostWindow and went ahead to recalculate even though the boost can currently be active, which indicates there's no need of calculating the boost again during that window

Impact

user boosts can be recalculated even though there's one active, breaking the boost window purpose

Tools Used

Manual review

Recommendations

Ensure that when the boost is still in the boostState.boostWindow, a new one is never calculated.