All reports
highLogic errorEVM-Solidity

MagicSea - the native DEX on the IotaEVM: A voter lose bribe rewards if another voter voted before claim.

Payout
$0
Protocol
MagicSea - the native DEX on the IotaEVM
Disclosed
Jul 11, 2024
Source
sherlock

MagicSea's BribeRewarder tracks a single global _lastUpdateTimestamp that is not scoped to a specific bribe period. Because the unclaimed-reward calculation for a given periodId depends on this one timestamp, once any voter deposits for a later period the time …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.