code-423n4 / 2023-08-pooltogether-mitigation-findings

0 stars 0 forks source link

M-07 MitigationConfirmed #47

Open code423n4 opened 1 year ago

code423n4 commented 1 year ago

Lines of code

Vulnerability details

Issue mitigated

About the problem

Pool together used PRBMath library that has known vulnerability in pow function, which was used in DrawAccumulatorLib and TierCalculationLib.

Solution

As it was proposed by warden, pool together has updated solidity to v0.8.19 and upgraded the PRBMath to version V4.

c4-judge commented 1 year ago

Picodes marked the issue as satisfactory