Submitted by WatchPug
While claim_rewards from the money-market, it calls the distributor_contract#spend() to send the rewards.
https://github.com/code-423n4/2022-02-anchor/blob/7af353e3234837979a19ddc8093dc9ad3c63ab6b/contracts/money-market-contracts/contracts/market/src/borrow.rs#L216-L234
However, the distributor_contract#spend() function have a spend_limit config and it will revert if the amount is larger than the spend_limit.
https://github.com/code-423n4/2022-02-anchor/blob/7af353e3234837979a19ddc8093dc9ad3c63ab6b/contracts/anchor-token-contracts/contracts/distributor/src/contract.rs#L153-L155
As a result, users wont be able to claim their rewards anymore once the amount of the rewards excess the spend_limit config on distributor_contract.
Consider removing the spend_limit or allowing users to specify an amount when claim_rewards.
Alex the Entreprenerd (triage) commented:
Albert Chon (judge) decreased severity to Medium and commented:
