waveygist
created:
by spalen0

3Jane 24h TimelockController - 25/08/2026 19:05 - MEDIUM

Summary

Allocates epoch 45 emissions from 0 to 5,564,323.764853960935076906 JANE. Replaces the RewardsDistributor Merkle root, changing the proof set and claimant entitlements. Owner-controlled distribution changes can authorize substantial reward claims; mint-versus-balance mode is not provided.

Call Flow

From: 0x1dCcD4628d48a50C1A7adEA3848bcC869f08f8C2

  1. setEpochEmissions(uint256,uint256) on 0xaC6985D4dBcd89CCAD71DB9bf0309eaF57F064e8 (RewardsDistributor)

    • uint256 _epoch: 45
    • uint256 emissions: 5,564,323,764,853,960,935,076,906 (≈ 5,564,323 JANE)

  2. updateRoot(bytes32) on 0xaC6985D4dBcd89CCAD71DB9bf0309eaF57F064e8 (RewardsDistributor)

    • bytes32 _root: 0x2d99679cc01747177410663e0c04767fcd6db8b4c83acf686792520208a16365

Analysis

Scope

Both calls target 0xaC6985D4dBcd89CCAD71DB9bf0309eaF57F064e8 (RewardsDistributor). They are owner-controlled distribution updates and executed successfully in simulation.

Call 1 — Set epoch emissions

setEpochEmissions(45, 5564323764853960935076906) assigns emissions to epoch 45.

  • Previous value: epochEmissions(45) = 0
  • New value: 5,564,323.764853960935076906 JANE
  • Delta: +5,564,323.764853960935076906 JANE
  • Token precision: The target’s jane() getter resolves JANE with 18 decimals, making this normalization verified.

The function records the total JANE allocation for the specified epoch and updates the distributor’s aggregate maxClaimable accounting according to the contract’s stated behavior. This increases the reward capacity that can be validated and claimed through the distributor. The call does not itself transfer JANE, mint tokens, modify user-level claimed balances, or increase totalClaimed.

The allocation is substantial in absolute terms. Its eventual asset impact depends on the distributor’s configured claim mode: claims may either transfer JANE held by the distributor or mint JANE on demand. The current useMint value and available token balance are not provided, so the execution path and any required funding cannot be determined here.

Call 2 — Replace the Merkle root

updateRoot replaces the distributor’s Merkle root with:

0x2d99679cc01747177410663e0c04767fcd6db8b4c83acf686792520208a16365

The previous root was:

0x9a8f7a9457542d4b3f39f6b5bb4b423441c4a34d6ef9aa5a764874624abff2d1

This changes the proof set used to validate claims. Users whose addresses and cumulative allocations are included under the new tree may claim according to the new root, while proofs generated against the prior root will no longer validate after the replacement. The root update does not directly move assets, reset the claimed mapping, or alter totalClaimed.

Because the root encodes claimant entitlements rather than exposing them directly in the transaction, the exact users and individual allocations cannot be verified from this calldata alone. The combination of the new root and the newly assigned epoch allocation expands or redirects the set of rewards that may become claimable.

Asset and state-flow assessment

No direct JANE transfer or mint occurs during these two calls. The immediate effects are storage updates:

  • epochEmissions[45] changes from zero to 5,564,323.764853960935076906 JANE.
  • merkleRoot changes from the prior root to the supplied new root.
  • The contract’s aggregate claim ceiling is updated as part of the emissions-setting operation.
  • User claimed balances and aggregate totalClaimed are unchanged by the calls themselves.

Future claims are the point at which JANE may leave the distributor or be minted, depending on useMint. The transaction does not provide that mode setting, the distributor’s token balance, the JANE token’s mint permissions, or the contents of the replacement Merkle tree.

Risk assessment

The changes are owner-authorized and affect reward accounting and claimant eligibility, so they have meaningful downstream financial impact. The epoch allocation introduces up to 5,564,323.764853960935076906 JANE of additional reward capacity, while the root replacement determines which proofs and cumulative entitlements can be accepted.

Risk is limited by the absence of an immediate asset movement and by the fact that claims still require valid Merkle proofs and must respect the distributor’s cumulative-claim accounting. However, the transaction does not reveal the new tree’s recipients or allocations, and the mint-versus-balance execution mode is unavailable. Those omissions prevent confirmation of who can claim, whether the distributor is adequately funded, or whether claims can expand JANE supply.

The simulation succeeded with no reported revert. Overall, the owner-controlled accounting and entitlement changes warrant MEDIUM risk, but the available data does not establish unauthorized behavior or justify a higher rating.