Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Low 01 Stale Storage #69

Closed
sherlock-admin2 opened this issue Jun 5, 2024 · 0 comments
Closed

Low 01 Stale Storage #69

sherlock-admin2 opened this issue Jun 5, 2024 · 0 comments
Labels
Low/Info A Low/Info severity issue Non-Reward This issue will not receive a payout

Comments

@sherlock-admin2
Copy link

Low 01 Stale Storage

Low/Info issue submitted by 1337web3

Summary

A change in the voteFactor during execution can lead to an inconsistent state in the system.

Vulnerability Detail

If the voteFactor changes during execution, it can lead to an inconsistent state. For example, if voteFactor / fractionDenominator changes from 2 to 1, users who claimed their tokens before the change will have less voting power compared to those who claim after the change. This discrepancy gives later claimants more voting power than expected.

https://github.com/sherlock-audit/2024-05-tokensoft-distributor-contracts-update/blob/main/contracts/packages/hardhat/contracts/claim/factory/AdvancedDistributorInitializable.sol#L188-L198

Impact

The inconsistent state caused by the change in voteFactor results in some users having more or less voting power than intended. This is considered a medium to high severity issue.

Code Snippet

None

Tool used

Manual Review

Recommendation

Ensure that the voteFactor remains constant during the execution to prevent discrepancies in voting power.

@sherlock-admin2 sherlock-admin2 added Low/Info A Low/Info severity issue Non-Reward This issue will not receive a payout labels Jun 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Low/Info A Low/Info severity issue Non-Reward This issue will not receive a payout
Projects
None yet
Development

No branches or pull requests

2 participants