Handle

cmichel

Vulnerability details

The ConcentratedLiquidityPoolManager uses the positionId as an index for incentives[pool][positionId] when it should be incentiveId instead:

// @audit should be Incentive memory incentive = incentives[pool][incentiveId];
Incentive memory incentive = incentives[pool][positionId];

This issue occurs in subscribe, claimReward, getReward

Impact

The incentive reward mechanism does not work correctly and a single person owning the positionId of the actual incentiveId can claim all rewards.

Recommended Mitigation Steps

Use incentiveId to index incentives[pool][.]

The text was updated successfully, but these errors were encountered:

All reactions