Submitted by bin2chen, also found by chaduke
setPendingRedemptionBalance() are not checking Old balances, resulting in the possibility of overwriting the new balance added by the user.
In setPendingRedemptionBalance(), MANAGER_ADMIN can adjust the amount of the cash token of user to be burned  in some cases: addressToBurnAmt[user]
Three main parameters are passed in.
Before modification will check epoch can not be greater than the currentEpoch, is can modify the currentEpoch user balance.
This has a problem:
The user is able to increase the addressToBurnAmt[user]  of currentEpoch by requestRedemption()
This leaves open the possibility that the user may have unknowingly executed requestRedemption() before settingPendingRedemptionBalance(), causing the increased balance to be overwritten
For example:
currentEpoch = 1
Balance of alice: addressToBurnAmt[alice] = 50
The result is missing 100.
Suggest adding oldBalance, not equal will revert.
Adding oldBalance, not equal will revert.
ali2251 (Ondo Finance) confirmed via duplicate issue #141
For this contest, 54 reports were submitted by wardens detailing low risk and non-critical issues. The report highlighted below by CodingNameKiki received the top score from the judge.
The following wardens also submitted reports: peanuts, luxartvinsec, 0xAgro, joestakey, Udsen, Viktor_Cortess, adriro, Aymen0909, betweenETHlines, zaskoh, csanuragjain, Josiah, 0x1f8b, rbserver, Tajobin, Kaysoft, BPZ, 0x52, cryptphi, hansfriese, 0xcm, BClabs, lukris02, nicobevi, tnevler, 0x5rings, 0xkato, erictee, tsvetanovv, IllIllI, BRONZEDISC, horsefacts, Deekshith99, gzeon, pavankv, shark, descharre, Bauer, 0xSmartContract, defsec, 2997ms, chaduke, chrisdior4, RaymondFam, scokaf, btk, arialblack14, Rolezn, Bnke0x0, koxuan, SaeedAlipoor01988, cygaar, and oyc_109.
