Submission Details
Severity:
MAX_REWARD_RATE is not used, which means when distributing the rewards it can overflow
Summary
MAX_REWARD_RATE is not used, which means when distributing the rewards it can overflow
Vulnerability Details
There is a variable in the BaseGauge.sol that is preventing overflow for reward rate, but it is never used
/// @notice Maximum reward rate to prevent overflow
uint256 public constant MAX_REWARD_RATE = 1000000e18;
Impact
overflowing
Tools Used
Recommendations
use the variable when a user is getting his rewards in the updateReward
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
BaseGauge lacks enforcement of both distributionCap and MAX_REWARD_RATE limits
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.