Core Contracts

Summary

The BoostController contract lacks a function that allows a delegator to manually revoke or withdraw a previously delegated boost from a recipient before its expiration. This means that once a boost is delegated, the delegator has no control over reclaiming it, leading to potential misuse or inefficiencies in boost allocation.

Vulnerability Details

A recipient could retain delegated boost even if they become inactive or if the delegator no longer wishes to support them.

Impact

Users cannot dynamically manage their delegated boost, leading to inefficient distribution of boosting power.

Tools Used

Recommendations

Allow the original delegator to manually withdraw their boost before the expiration period.