Handle

gzeon

Vulnerability details

Impact

When owner call cancelPromotion, the contract

1. Delete the promotion struct (L132)
2. Return all token reserved for future epochs (L133)

If there are token left for previous epochs, they will be stuck in the contract as the promotion struct is gone.

#Proof of Concept

Recommended Mitigation Steps

Set numberOfEpochs instead, i.e.
_promotions[_promotionId].numberOfEpochs = _getCurrentEpochId(_promotion)+1;

The text was updated successfully, but these errors were encountered:

All reactions