Foundry DeFi Stablecoin CodeHawks Audit Contest

Summary

The security audit identified a potential vulnerability in the Solidity Stable Coin project related to the redeemCollateral and redeemCollateralForDsc functions. The vulnerability involves the absence of the isAllowedToken modifier on redeemCollateral and **redeemCollateralForDsc**functions, which could result in a lack of appropriate revert error handling and increased gas costs for users..

Vulnerability Details

The redeemCollateral and redeemCollateralForDsc functions allow users to redeem their collateral. However, these functions lack the isAllowedToken modifier. Without this modifier, the functions will not check if the token is allowed.

Impact

The absence of the isAllowedToken modifier on the redeemCollateral and redeemCollateralForDsc functions will lead to more gas costs for the user and incorrect explanation on why the call reverted.

Tools Used

Foundry and manual reviewing.

Recommended Mitigation

Implement the isAllowedToken modifier on the redeemCollateral and redeemCollateralForDsc functions.