gda pool permission check

superfluid-finance · Aug 19, 2024 · 0ae00ad · 0ae00ad
1 parent 0ed2d5c
commit 0ae00ad
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/packages/ethereum-contracts/contracts/agreements/gdav1/GeneralDistributionAgreementV1.sol b/packages/ethereum-contracts/contracts/agreements/gdav1/GeneralDistributionAgreementV1.sol
@@ -421,7 +421,8 @@ contract GeneralDistributionAgreementV1 is AgreementBase, TokenMonad, IGeneralDi
 
         newCtx = ctx;
 
-        if (_isPool(token, address(pool)) == false) {
+        if (pool.superToken() != token ||
+            _isPool(token, address(pool)) == false) {
             revert GDA_ONLY_SUPER_TOKEN_POOL();
         }
 
@@ -485,7 +486,8 @@ contract GeneralDistributionAgreementV1 is AgreementBase, TokenMonad, IGeneralDi
         int96 requestedFlowRate,
         bytes calldata ctx
     ) external override returns (bytes memory newCtx) {
-        if (_isPool(token, address(pool)) == false) {
+        if (pool.superToken() != token ||
+            _isPool(token, address(pool)) == false) {
             revert GDA_ONLY_SUPER_TOKEN_POOL();
         }
         if (requestedFlowRate < 0) {