Protect against recursive withdrawRewardFor attack

blockchainsllc · Jun 12, 2016 · f01f3bd · f01f3bd · craigcalef · Jun 18, 2016
1 parent 6967d70
commit f01f3bd
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/DAO.sol b/DAO.sol
@@ -744,9 +744,10 @@ contract DAO is DAOInterface, Token, TokenCreation {
 
         reward = rewardAccount.balance < reward ? rewardAccount.balance : reward;
 
+        paidOut[_account] += reward;
         if (!rewardAccount.payOut(_account, reward))
             throw;
-        paidOut[_account] += reward;
+
         return true;
     }