Submitted by csanuragjain
ExtraRewardsDistributor.sol#L127
User can forfeit other user rewards by giving a higher _startIndex in getReward function.
Do not allow users to call getReward function for other users.
0xMaharishi (Aura Finance) confirmed, but disagreed with severity and commented:
LSDan (judge) commented:
0xMaharishi (Aura Finance) resolved:
