Skip to content

Mitigation Confirmed for QA #16

@code423n4

Description

@code423n4

Issue #19

KIB-02L - Mitigated. epochLength is now properly validated in the initialize function

KIB-04L - Mitigated. Logic and variables related to MAX_YIELD have been removed.

KFC-02L - Mitigated. _release() is no longer called if _payees.length == 0

KFC-03L - Mitigated. Same as M-02

Issue #7

L-05 - Mitigated. SetEpochLength only use to refresh the yield if the new epoch length was longer than the old one. This didn't take into account that short epoch lengths could also result in the previousEpoch being backshifted. It now checks if any backshift happens and forces a refresh with the old length before setting the new length.

Issue #23

Mitigated. This is the same issue raised in KFC-02L

Issue #15

KUMASwap#buyBond now follows the CEI pattern by minting the clone bond at the end of that flow rather than in the middle. This eliminates any harm that could have potentially resulted from reentrancy.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions