Lines of code

Vulnerability details

Impact

The ‘setConcRewards’ and ‘setAmbRewards’ doesn’t emit event to to signify to all parties involved the new concentrated and ambient results.

Proof of Concept

A user not aware of new reward price might suppose he/she have been swindled upon realizing that newly accrued reward is lower than rewards accrued in a previous week.
Malicious actors upon gaining control of governance by having excess governance tokens might set exorbitant or extremely low rewards without prompting pool contributors

Tools Used

Manual review

Recommended Mitigation Steps

Events should be emitted after new Concentrated and ambient rewards are set.

Assessed type

Governance

The text was updated successfully, but these errors were encountered:

All reactions