gauge’s periodState.emission can’t be updated.
Summary
gauge’s function setEmission(BaseGauge.sol) can only be called by the contract GaugeController, but there is no way to call function setEmission(gauge1 contract) in the contract GaugeController. as a result, an important property of the protocol can’t be increased/decreased/updated
Vulnerability Details
**1. Let’s assume a gauge’s(assume gauge1) periodState.emission = 250000e18(which is set during gauge1 contract creation time). **
2. now protocol wants to update/decrease gauge1 contract’s periodState.emission, so the function setEmission(gauge1 contract) should be called but there is no way to calls function setEmission(gauge1 contract) in the contract GaugeController because function setEmission(gauge1 contract) can only be called by the contract GaugeController.
**3. as a result, an important property of the protocol can’t be increased/decreased/updated. **
**
**
Impact
** an important property(periodState.emission) of the protocol can’t be increased/decreased/updated.**
Tools Used
manual review
Recommendations
create a function in the contract GaugeController to call gauge’s function setEmission(BaseGauge.sol).
Lead Judging Commences
`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller
`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.