Submission Details
Severity:
Unused distribution cap in gauges
Summary
The gauges define a parameter to cap the rewards distribution amount and a maximum reward rate, however it is not implemented in the code:
/// @notice Maximum reward rate to prevent overflow
uint256 public constant MAX_REWARD_RATE = 1000000e18;
/// @notice Cap on reward distribution amount
uint256 public distributionCap;
Vulnerability Details
Impact
Tools Used
Recommendations
Check the reward distribution and rate are not exceeding caps before distributing rewards.
Updates
Lead Judging Commences
inallhonesty 10 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
inallhonesty 10 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.