# ConcentratedLiquidityPoolManager.sol claimReward() and reclaimIncentive() will fail when incentive.token is token0 or token1

Incentives denominated in token0/token1 get drained by collect() fee payments, leaving claimReward() and reclaimIncentive() underfunded and reverting.

- Payout: Audit contest
- Severity: medium
- Program: Sushi
- Found by: WatchPug
- Disclosed: 2021-11-30
- Write-up quality: 6/10
- Original: https://github.com/code-423n4/2021-09-sushitrident-2-findings/issues/23
- Library page: https://bugbountylibrary.com/r/c4%3A2021-09-sushitrident-2%3AM-06
- Tags: area:web3 domain:web3 impact:dos kind:contest platform:code4rena sev:medium tech:evm tech:solidity technique:source-review vuln:accounting-error vuln:business-logic

**Target:** ConcentratedLiquidityPoolManager / ConcentratedLiquidityPosition contracts
**Root cause:** collect() pays fees from the contract's bento balance of token0/token1 without distinguishing incentive funds, so incentives denominated in token0/token1 are consumed as fee liquidity.
**Steps:**
1. Add an incentive with token == token0 or token1 to a concentrated position.
2. Trigger collect() on a position where bento balance0/balance1 is below owed fees; it pulls pool fees and spends the shared bento balance.
3. Repeated collects drain the incentive balance held by the manager.
4. Call claimReward() or reclaimIncentive(); _transfer of incentive.token fails due to insufficient balance.
**How found:** Code review of collect()'s balance check and _transfer, noticing it uses the same bento balance that holds incentive deposits when incentive.token equals token0/token1.
**Exploitation:** Any user interacting with the position causes collect() to spend the incentive tokens as fee payment until depleted; legitimate claimers then cannot withdraw rewards.
**Insight:** When a contract custodies both user incentives and operational fee balances in the same token, check whether any payout path (collect/swap) draws from the shared balance without accounting for reserved incentive liabilities.