RewardThrottle._sendToDistributor() reverts if one distributor is inactive.

Lines of code Vulnerability details Impact RewardThrottle.sendToDistributor reverts if one distributor is inactive. Proof of Concept RewardThrottle.sendToDistributor distributes the rewards to several distributors according to their allocation ratios. File:...

setPendingRedemptionBalance() fails to modify currentRedeemAmount when epoch == currentEpoch

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. setPendingRedemptionBalance fails to modify currentRedeemAmount when epoch == currentEpoch. This is necessary since when epoch == currentEpoch, if redemptionInfoPerEpochepoch.addressToBurnAmtuser is...

DOS on valid signatures

Lines of code Vulnerability details Impact It was observed that signature matching can fail due to incorrect updation of operatorIndex. Each loop iteration should reset operatorIndex but this is not happening causing matches to be skipped as shown in POC Proof of Concept 1. Assume...