search

hats-finance / Fenix--0x9d7765a7ebd5b6322a30797a44a5428531970d3d

0 stars 1 forks source link

Blast points and gold are not set correctly leading to a loss of these points for the protocol and users #23

Open hats-bug-reporter[bot] opened 4 months ago

hats-bug-reporter[bot] commented 4 months ago

Github username: @ArnieGod Twitter username: -- Submission hash (on-chain): 0x46f665c57e8bfe3bcf9440a95c6294ed1b8f2efb9743c788ee2f0f4581f670a0 Severity: high

Description: Description\ Every protocol on blast will accrue points and gold the more it is used. These points are either to be kept by the protocol or to be distrubuted to the user pro rata. The protocol does never set up these point or gold leading to a loss of accumulated points and incentives for the users.

Impact\ Users and protocol will miss out on points on the blast L2

0xmahdirostami commented 4 months ago

duplicate of #20

ArnieSec commented 4 months ago

duplicate of #20

Not a duplicate, points and gas yield are 2 completely different things. Furthermore configuring gas yield does not configure points. Points are incentives for using blast protocols that correspond to an airdrop. Gas yield is yield that can be claimed by the protocol when a user pays the gas fee to the contract.

ArnieSec commented 4 months ago

description

Blast points and gold are used to incentivize users to use Dapps who configure points and gold correctly.

Because the protocol does not configure points correctly, the users will be less incentivized to use the protocol.

Additionally blast gold has monetary value in the market. Not configuring blast points and gold is a loss of value and funds for the protocol.

From blast docs:

Blast Gold is distributed manually to smart contracts over time (every month). An announcement from the @Blast đť•Ź account will be made every time Gold is distributed.

The purpose of Gold is to reward Dapps in a meritocratic way. Dapps don’t need to have strong connections or be good at BD to get Gold. Dapps that build something valuable for the Blast ecosystem will be rewarded.

Currently the points operator is not set so the protocol will not be able to claim the points.

From blast docs:

A contract can call the configurePointsOperator function at any point: during construction, on initialization (for proxied contracts), or even days later. Once the points operator has been set once though, only the existing points operator can update it by calling configurePointsOperatorOnBehalf.

Because there is no function in the contract which calls configurePointsOperator there will be no way to claim the points.

m-waqas88 commented 4 months ago

Has this bug been validated? @ArnieGod have you been paid for this?

ArnieSec commented 4 months ago

Has this bug been validated? @ArnieGod have you been paid for this?

No

I'd like to add I know the protocol configured points in some contracts but not in all. Just saw I never pointed this out in my issue I submitted.

m-waqas88 commented 4 months ago

Ohh ok. I tried to see the details of your submission using the submission hash on etherscan ethereum mainnet. But that transaction hash was not found. How much in terms of $ did the submission cost? @ArnieGod