mediumLogic errorEVM-Solidity
Paladin: userQuestPeriodRewards` will be overwritten on second claim
- Payout
- $0
- Protocol
- Paladin
- Disclosed
- Feb 10, 2024
- Source
- hats
Paladin's quest reward claim flow keys each user's claim record by the Merkle-tree index rather than by the user's address for a given quest and period. When an emergency update to a quest period publishes a new Merkle root that grants an additional claim inde …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989/issues/29
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.