Submission Details
Severity:
Set boost parameter call is not implemented in the gauge controller
Summary
Set boost parameter call is not implemented in the gauge controller.
Vulnerability Details
Following is set boost parameter
function setBoostParameters(
uint256 _maxBoost,
uint256 _minBoost,
uint256 _boostWindow
) external onlyController {
boostState.maxBoost = _maxBoost;
boostState.minBoost = _minBoost;
boostState.boostWindow = _boostWindow;
}
It is only callable by the controller but in gauge controller contract there is not functionality for calling this function on the gauge thus the boost parameter cannot be updated.
Impact
Updation of boost paramters can never happen
Tools Used
Manual review
Recommendations
Implement this functionality in the gauge controller.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.