Upgraded Q -> 2 from #752 [1677633810856]

Judge has assessed an item in Issue #752 as 2 risk. The relevant finding follows:

Possibility of MultiRewardEscrow.claimReward() to be vulnerable to a reentrancy attack
There are a bunch of external calls before setting accruedRewards[user][_rewardTokens[i]]to zero. Malicious actors can add some exploits on the external calls potentially draining the rewards pool of that reward token. It is recommended to refactor this conforming to the check-effects pattern

The text was updated successfully, but these errors were encountered:

All reactions