Upgraded Q -> 2 from #258 [1706642045293] #1278
Labels
2 (Med Risk)
Assets not at direct risk, but function/availability of the protocol could be impacted or leak value
duplicate-294
partial-50
Incomplete articulation of vulnerability; eligible for partial credit only (50%)
Judge has assessed an item in Issue #258 as 2 risk. The relevant finding follows:
[L-10] There is a potential for underflow in the
decreaseUnmintedRebaseRewards
function within theERC20RebaseDistributor
token.When updating shares, we adjust the share price accordingly.
https://github.com/code-423n4/2023-12-ethereumcreditguild/blob/2376d9af792584e3d15ec9c32578daa33bb56b43/src/tokens/ERC20RebaseDistributor.sol#L213-L217
No need to calculate
percentChange
; the updated price will be as follows:Due to rounding, the calculated price may be slightly larger.
Consequently, when attempting to decrease unminted rewards, there is a risk of underflow.
The text was updated successfully, but these errors were encountered: