mediumLogic errorEVM-Solidity
Paladin: Incorrect Allocation results in `getQuestAllocationForPeriod` when `questRewardToken` has Decimals other than 18
- Payout
- $0
- Protocol
- Paladin
- Disclosed
- Feb 11, 2024
- Source
- hats
Paladin's quest-reward distribution logic miscalculates per-vote allocations whenever a granted quest rewards voters in a token that doesn't use 18 decimals (such as USDC's 6). The MultiMerkleDistributorV2 stores the raw per-period reward amount for the quest, …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989/issues/37
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.