Summary

Vulnerability Details

The claimable_amount function allows users to query their claimable amount without any verification of whether they have actually claimed tokens already or not:

Although the function itself is not a security risk, it could lead to potential UI confusion or abuse, as users may incorrectly assume they can claim more tokens than allowed. Since the contract allows anyone to query the claimable amount, the front-end should carefully manage the state and verify user claims before proceeding.

Impact

Tools Used

Recommendations

Ensure that the front-end correctly integrates this function and that any interactions with the contract are clearly explained to the user. Additionally, provide better state management to ensure users can only claim the appropriate amount.