Skip to content

Aave's claimRewards returns the actual rewards claimed #100

@code423n4

Description

@code423n4

Handle

pauliax

Vulnerability details

Impact

IAaveIncentivesController function claimRewards returns the actual rewards claimed so I think it makes sense to
emit ClaimAaveRewardTokenToTreasury(amount);
with that actual returned value as in theory, it may differ from amount.

Recommended Mitigation Steps

uint256 rewards = IAaveIncentivesController(aaveIncentivesController).claimRewards(rewardsDepositedAssets, amount, treasury);
emit ClaimAaveRewardTokenToTreasury(rewards);

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions