Submission Details
Severity:
Rewards emissions cannot be increased but only decreased
Summary
Setting rewards emissions in the Gauge contracts can only be decreased and not increased.
Vulnerability Details
Admins can set rewards emissions in the gauge contracts to change them:
function setEmission(uint256 emission) external onlyController {
if (emission > periodState.emission) revert RewardCapExceeded();
periodState.emission = emission;
emit EmissionUpdated(emission);
}
But in the current implementation, emissions can only be decreased and not increased by any amounts.
Impact
Reward emissions cannot be increased but only decreased.
Tools Used
Manual Review
Recommendations
Allow for increasing emissions as well for flexibility.
Updates
Appeal created
inallhonesty 6 months ago
Submission Judgement Published Assigned finding tags:
BaseGuage::setEmission can be configured only to lower values limiting the
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.