highLogic errorEVM-Solidity
MagicSea - the native DEX on the IotaEVM: Voters will lose all bribe rewards forever if they do not claim their rewards after the last bribing period
- Payout
- $0
- Protocol
- MagicSea - the native DEX on the IotaEVM
- Disclosed
- Jul 11, 2024
- Source
- sherlock
MagicSea's BribeRewarder.claim() lets a voting NFT owner collect bribe rewards across every voting period that has finished on the Voter contract. The loop bound comes from Voter.getLatestFinishedPeriod(), which advances indefinitely, while each BribeRewarder …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.