Root + Impact

Description

• When users deposit assets, they are charged a certain fee based on the amount of their asset, and that fee is transferred out of the protocol to the fee recipient address

• The issue here is that when user's decide to cancel participation(this can only be done before the event starts), the fee charged when they deposited isnt returned to them even though they didnt participate in an event, the user is therefore penalized the full fee amount without having completed the activity that the fee was intended to cover, resulting in an unrecoverable loss of principal for the user

Risk

Likelihood:

• When user cancels participation after previously depositing

  
  

Impact:

• Loss of funds for the user

Proof of Concept

Recommended Mitigation