RewardThrottle.checkRewardUnderflow can't distribute rewards because fillInEpochGaps updates activeEpoch when RewardThrottle is inactive

Lines of code Vulnerability details Impact RewardThrottle.checkRewardUnderflow can't distribute rewards because activeEpoch can be updated to a new one. Proof of Concept RewardThrottle.checkRewardUnderflow distributes rewards only when RewardThrottle is active. function checkRewardUnderflow publi...

RewardThrottle.populateFromPreviousThrottle may be exposed to front-run attack

Lines of code Vulnerability details Impact RewardThrottle.populateFromPreviousThrottle allows ADMINROLE to use epochData from previousThrottle to populate state from activeEpoch to epoch in current RewardThrottle. function populateFromPreviousThrottleaddress previousThrottle, uint256 epoch extern...