BIR-21: L1 block.number

Proposer

Beanstalk Immunefi Committee

Summary

Reward 5,000 Beans to the whitehat that reported the L1 block.number issue resolved in EBIP-19.

Bug

The Morning Auction and Generalized Convert used block.number to determine how much time had passed and Convert capacity (the amount of assets that can be Converted within 1 L2 block), respectively. On Arbitrum, block.number returns the L1 block number rather than the latest block number on Arbitrum. As a result, the Morning Auction had been lasting longer than its intended duration (the entire Season) and the Convert capacity was accrued over multiple blocks rather a single block.

Fix

As implemented in EBIP-19, update the Morning Auction and Generalized Convert to fetch the L2 block number.

Determination

Given that no funds were at risk and that the only consequences of the bug were (1) the Morning Auction had been lasting longer than its intended duration (the entire Season), and (2) the Convert capacity was accrued over multiple blocks rather a single block, the BIC has determined that this report be rewarded 5,000 Beans.