addCapped plays important role in the updating the accumulated premia. The problem is, that there will be a point in time when the accumulators will overflow. Once upon a time, when this occur there will be no option to reset this number as well as it will continuously return the outdated data (last accumulator before the overflow), without notification
Tools Used
Manual review
Recommended Mitigation Steps
I highly encourage you to create the mechanism that could reset the overflowed amounts, as well as prevent from returning the outdated data
Lines of code
https://github.com/code-423n4/2024-04-panoptic/blob/833312ebd600665b577fbd9c03ffa0daf250ed24/contracts/types/LeftRight.sol#L279-L302
Vulnerability details
Impact
addCapped plays important role in the updating the accumulated premia. The problem is, that there will be a point in time when the accumulators will overflow. Once upon a time, when this occur there will be no option to reset this number as well as it will continuously return the outdated data (last accumulator before the overflow), without notification
Tools Used
Manual review
Recommended Mitigation Steps
I highly encourage you to create the mechanism that could reset the overflowed amounts, as well as prevent from returning the outdated data
Assessed type
Error