Submission Details
Severity:
VOTE_DELAY is not implemented correctly.
Summary
VOTE_DELAY is not implemented correctly.
Vulnerability Details
The purpose of VOTE_DELAY is the required delay between votes.
But in vote(), there is no VOTE_DELAY check.
Users can repeatedly call vote() without waiting for the required VOTE_DELAY.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
GaugeController::vote never enforces VOTE_DELAY or updates lastVoteTime, allowing users to spam votes and manipulate gauge weights without waiting
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
GaugeController::vote never enforces VOTE_DELAY or updates lastVoteTime, allowing users to spam votes and manipulate gauge weights without waiting
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.