Submission Details
Severity:
Unused distribution cap in gauges
Summary
The gauges define a parameter to cap the rewards distribution amount and a maximum reward rate, however it is not implemented in the code:
/// @notice Maximum reward rate to prevent overflow
uint256 public constant MAX_REWARD_RATE = 1000000e18;
/// @notice Cap on reward distribution amount
uint256 public distributionCap;
Vulnerability Details
Impact
Tools Used
Recommendations
Check the reward distribution and rate are not exceeding caps before distributing rewards.
Updates
Lead Judging Commences
inallhonesty 6 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
inallhonesty 6 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.