PT-2024-26111

Name of the Vulnerable Software and Affected Versions LNbits versions prior to 0.12.6 Description Paying invoices in Eclair that do not get settled within the internal timeout about 30s can lead to a payment being considered failed, even though it may still be in flight. This issue can result in ...

Incentivizer rewards are unclear and can be more than allotted?

Handle cmichel Vulnerability details Note that the Incentivizer.create allocates programInfo.amount.sum tokens to be rewarded. It's unclear how the rewards that are actually paid out see Program.unsettled over the duration relate to this value. The ProgramInfo.amountPerShare returns the...