mediumLogic errorEVM-Solidity
PoolTogether: The Prize Layer for DeFi: Draws can be retried even if a random number is available or the current draw has finished
- Payout
- $0
- Protocol
- PoolTogether: The Prize Layer for DeFi
- Disclosed
- Jun 6, 2024
- Source
- sherlock
PoolTogether's draw lifecycle relies on RngWitnet to provide randomness, but the failed-request check that gates whether a draw can be retried is based on a single block-level query status, whereas the Witnet layer's success semantics treat any non-errored req …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.