search

code-423n4 / 2023-08-pooltogether-mitigation-findings

0 stars 0 forks source link

M-09 MitigationConfirmed #49

Open code423n4 opened 1 year ago

code423n4 commented 1 year ago

Lines of code

Vulnerability details

Issue mitigated

About the problem

Claimer._computeMaxFee function calculated fee for the bot incorrectly, because it used getTierPrizeSize for the wrong tier if tier was not canary. Because of that, there can be cases, when bots will be not incentivized to claim prizes as they will not receive enough fee to cover gas costs.

Solution

This issue was fixed by fetching correct prize size for the tier.

c4-judge commented 1 year ago

Picodes marked the issue as satisfactory