Fixed [P2-I-05] Check "reward_mint"

by providing a check for the reward mint in the claim & fill_vault instructions.
metaplex-foundation · Sep 27, 2024 · 67f6cca · 67f6cca
1 parent 479f265
commit 67f6cca
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/programs/rewards/src/instructions/claim.rs b/programs/rewards/src/instructions/claim.rs
@@ -33,6 +33,7 @@ pub fn process_claim<'a>(program_id: &Pubkey, accounts: &'a [AccountInfo<'a>]) -
         let reward_pool_data = &mut reward_pool.data.borrow_mut();
         let wrapped_reward_pool = WrappedRewardPool::from_bytes_mut(reward_pool_data)?;
 
+        assert_account_key(reward_mint, &wrapped_reward_pool.pool.reward_mint)?;
         assert_account_key(
             deposit_authority,
             &wrapped_reward_pool.pool.deposit_authority,

diff --git a/programs/rewards/src/instructions/fill_vault.rs b/programs/rewards/src/instructions/fill_vault.rs
@@ -31,6 +31,7 @@ pub fn process_fill_vault<'a>(
     let wrapped_reward_pool = WrappedRewardPool::from_bytes_mut(reward_pool_data)?;
 
     assert_account_key(fill_authority, &wrapped_reward_pool.pool.fill_authority)?;
+    assert_account_key(reward_mint, &wrapped_reward_pool.pool.reward_mint)?;
 
     {
         let vault_seeds = &[