The project documentation explicitly states that Phase 1 should have "high penalties" while Phase 2 has "moderate penalties," implying a design requirement where phase1PenaltyBps > phase2PenaltyBps.
However, the TokenLaunchHook constructor does not enforce this relationship. It allows phase2PenaltyBps to be greater than or equal to phase1PenaltyBps, potentially leading to a misconfigured state that violates the intended economic design of the launch.
Likelihood:
Depends on deployer input.
Impact:
Could lead to wrong information if misconfigured,
Add a requirement in the constructor to enforce the intended penalty hierarchy.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.
The contest is complete and the rewards are being distributed.