Lucene search

K
code423n4Code4renaCODE423N4:2022-02-CONCUR-FINDINGS-ISSUES-268
HistoryApr 28, 2022 - 12:00 a.m.

Reward lost

2022-04-2800:00:00
Code4rena
github.com
6
medium risk
reward system
vulnerability
admin control
smart contract

Judge @GalloDaSballo has assessed the 11th item in QA Report #26 as Medium risk. The relevant finding follows:

Contract: <https://github.com/code-423n4/2022-02-concur/blob/main/contracts/StakingRewards.sol&gt;

In notifyRewardAmount function, if Admin added a reward 100 once block.timestamp >= periodFinish. Now if Admin decides to add 200 rewards calling this function at block.timestamp >= periodFinish then contract considers total reward as 200 and discards the reward 100 added initially

if (block.timestamp &gt;= periodFinish) {
            rewardRate = reward / rewardsDuration; // old reward is not considered
        }

The text was updated successfully, but these errors were encountered:

All reactions