Can only refund leftovers once

PartyDAO · Apr 10, 2024 · f8f9452 · f8f9452
1 parent 5bbe9dd
commit f8f9452
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/Dropper.sol b/src/Dropper.sol
@@ -49,10 +49,13 @@ contract Dropper {
 
     function refundToRecipient(uint256 dropId) external {
         require(_drops[dropId].expirationTimestamp <= block.timestamp, "Dropper: still live");
+        require(_drops[dropId].totalToken > _drops[dropId].claimedTokens, "Dropper: all tokens claimed");
 
         IERC20(_drops[dropId].tokenAddress).transfer(
             _drops[dropId].expirationRecipient, _drops[dropId].totalToken - _drops[dropId].claimedTokens
         );
+
+        _drops[dropId].claimedTokens = _drops[dropId].totalToken;
     }
 
     function claim(uint256 dropId, uint256 amount, bytes32[] calldata merkleProof) public {