mediumLogic errorEVM-Solidity
USG - Tangent: Delayed Reward Cut Parameter Updates (Two-Cycle Enforcement Lag)
- Payout
- $0
- Protocol
- USG - Tangent
- Disclosed
- Sep 11, 2025
- Source
- sherlock
In USG/Tangent's RewardAccumulator, the owner-only updateRCParams() commits new reward-cut parameters only after calling processRewards(), so the staged parameters are not used in the current cycle's reward-cut computation. Because lastRewardCuts is computed f …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.