mediumLogic errorEVM-Solidity
Nouns DAO - Clients Incentives: Rewards can be allocated for less than minimal reward period with the help of bogus proposal
- Payout
- $0
- Protocol
- Nouns DAO - Clients Incentives
- Disclosed
- Apr 1, 2024
- Source
- sherlock
Nouns DAO's Client Incentives Rewards contract had a validation-ordering flaw in its reward distribution logic: the minimumRewardPeriod check was evaluated against the creation timestamp of a user-supplied lastProposal whose eligibility was never verified befo …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.