Root + Impact

Description

• Description

  When the contract is paused, the faucet still allows token claims to proceed but skips ETH distribution, violating the faucet’s stated rule that new users must receive both tokens and Seth.

  The inconsistency occurs because the token mint logic executes regardless of pause status, while the ETH transfer is gated behind a pause check.

  function claimFaucetTokens() external {

  ...

  @> if (!hasClaimedEth[faucetClaimer] && !sepEthDripsPaused)

  This results in partial faucet execution, leading to incorrect user initialization.// Root cause in the codebase with @> marks to highlight the relevant section

Risk

Likelihood:

• Happens any time the faucet is paused.

• Affects every new user attempting to claim during paused state.

Impact:

• Violates faucet logic — new users receive only tokens without ETH.

• Creates inconsistent state between claimants (some get ETH, some do not).

• Can confuse users or break off-chain reward expectations.

Recommended Mitigation