Gamma Brevis Rewarder · FINDING NOTE
Rounding left part of the reward budget undistributed
Collaborative submission by 0xpetern. View the public report
From collaborative work with 0xpetern. The public report credits 0xpetern alongside other researchers in the accepted Medium finding group, M-1.
1 min read
Page link
Summary
Gamma's reward schedule could promise less than the budget supplied for it. The review identified rounding losses when a distribution was divided across reward periods, leaving part of the intended incentive unallocated.
Root cause
The allocation calculation discarded fractional remainders without preserving them for later distribution. As a result, the sum of the scheduled rewards could fall short of the amount available to pay participants.
Attack scenario
The report describes an accounting failure during ordinary distribution setup. A rewards campaign could proceed with a shortfall built into its schedule, even without an attacker manipulating claims or obtaining privileged access.
Impact
Participants could receive less than the intended reward allocation, while part of the campaign's budget remained undistributed. The discrepancy weakened the link between the funded incentive and what the schedule could actually deliver.
Fix recommendation
Preserve rounding remainders and reconcile scheduled payouts with the full distributable budget. Sherlock reports a fix and links GammaRewarder pull request 2, but the linked change was unavailable for public inspection during this review.