code-423n4 / 2023-08-reserve-mitigation-findings

0 stars 0 forks source link

M-04 MitigationConfirmed #12

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Lines of code

Vulnerability details

This issue is mitigated.

Explanation of found problem

This is my issue. In case if Furnace.setRatio is called, when frozen state, that means that melt function will revert and as result variables will not be updated using previous rate. So when system will be unfrozen, then new ratio will be used for previous period of time.

How it was fixed

As was proposed, reserve team updated lastPayout and lastPayoutBal variables inside catch block, which will update variables even in frozen state of system, which fixes issue.

thebrittfactor commented 1 year ago

For transparency, the warden was unable to edit submission title. C4 staff has updated from M-05 to M-04.

c4-judge commented 1 year ago

0xean marked the issue as nullified