Submitted by cccz
When the owner calls the changeTokenOf function of the JBController contract, the token corresponding to the current project will be changed, which will make the oldToken holder unable to redeem the overflowing assets.
https://github.com/jbx-protocol/juice-contracts-v2-code4rena//blob/828bf2f3e719873daa08081cfa0d0a6deaa5ace5/contracts/JBController.sol#L588-L606
https://github.com/jbx-protocol/juice-contracts-v2-code4rena//blob/828bf2f3e719873daa08081cfa0d0a6deaa5ace5/contracts/JBTokenStore.sol#L236-L269
Consider adding a delay to changeTokenOf, or adding a function to convert oldToken to newToken.
mejango (Juicebox) confirmed
mejango (Juicebox) resolved:
berndartmueller (warden) reviewed mitigation:
