Submission Details
Severity:
[M-06] Wrong initialization value of minBoost in BaseGauge contract
Summary
The value used to initialize minBoost is wrong according to the design of the contract.
Vulnerability Details
The value of minBoost is set to 1e18 while to be in line with the values assigned to maxBoost and WEIGHT_PRECISION, it should be 10000, meaning that's it's a 1x boost.
Impact
This issue will result in wrong results and checks, especially in the operations performed by BoostCalculator which is the library that handles boost updates.
This will compromise the functioning of the protocol's gauge system.
Tools Used
Manual review.
Recommendations
Replace 1e18 with 10000.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
boostState.minBoost is set to 1e18
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.