Submission Details
Severity:
Users could not claim their allocation
Summary
In Treasury contract, user with role ALLOCATOR_ROLE could store in storage, how many tokens should be allocated to other users. But there is not function for claim these tokens.
Vulnerability Details
In Treasury.sol there is function allocateFunds() for allocation tokens to users.
function allocateFunds(
address recipient,
uint256 amount
) external override onlyRole(ALLOCATOR_ROLE) {
if (recipient == address(0)) revert InvalidRecipient();
if (amount == 0) revert InvalidAmount();
_allocations[msg.sender][recipient] = amount;
emit FundsAllocated(recipient, amount);
}
But this contract do not contain functions for claim these tokens.
Impact
Users could not receive tokens, which were allocated for them
Tools Used
Manual review
Recommendations
Add functions for claim allocated tokens.
Updates
Lead Judging Commences
inallhonesty 3 months ago
Submission Judgement Published Assigned finding tags:
What do people do with allocations
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.