mediumLogic errorEVM-Solidity
PoolTogether: The Prize Layer for DeFi: `DrawManager.canStartDraw` does not consider retried RNG requests when determining if a new draw auction can be started
- Payout
- $0
- Protocol
- PoolTogether: The Prize Layer for DeFi
- Disclosed
- Jun 6, 2024
- Source
- sherlock
PoolTogether's DrawManager exposes a view function canStartDraw that gates whether a new draw auction can be started, but its expired-auction check is inconsistent with the mutating startDraw function it mirrors. startDraw measures elapsed auction time from th …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.