Submission Details
Impact:
Likelihood:
Protocol does not account for fee-on-transfer tokens
When fundContest transfers totalRewards to the Pot contract, a fee-on-transfer token will deduct a fee, resulting in the Pot contract receiving less than totalRewards. However, the Pot contract initializes remainingRewards to totalRewards and allows users to claim their full cuts. This will eventually cause the Pot contract to run out of tokens, preventing the last users from claiming their rewards.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.