Judge has assessed an item in Issue #752 as 2 risk. The relevant finding follows:
Possibility of MultiRewardEscrow.claimReward() to be vulnerable to a reentrancy attack
There are a bunch of external calls before setting accruedRewards[user][_rewardTokens[i]]to zero. Malicious actors can add some exploits on the external calls potentially draining the rewards pool of that reward token. It is recommended to refactor this conforming to the check-effects pattern
Judge has assessed an item in Issue #752 as 2 risk. The relevant finding follows:
Possibility of MultiRewardEscrow.claimReward() to be vulnerable to a reentrancy attack There are a bunch of external calls before setting accruedRewards[user][_rewardTokens[i]]to zero. Malicious actors can add some exploits on the external calls potentially draining the rewards pool of that reward token. It is recommended to refactor this conforming to the check-effects pattern