Foundry DeFi Stablecoin CodeHawks Audit Contest

Summary

The DecentralizedStableCoin contract is an ERC20-compliant token contract with additional functionality for burning and minting tokens.

Vulnerability Details

Negative Minting: The mint function allows for minting tokens with a specified amount. However, it does not check if the total supply plus the minted amount exceeds the maximum allowed value for an uint256, which is 2^256 - 1. Minting a large amount of tokens without such a check could lead to an integer overflow, resulting in unintended consequences.

Zero Address Check: In the mint function, there is a check to prevent minting to the zero address (address(0)). While this is a good practice to avoid token loss, the burn function does not have a similar check, and it should also include a check to prevent burning tokens to the zero address.

Impact

Negative Minting Impact: If an integer overflow occurs during the minting process due to a large minted amount, it may result in an incorrect total supply, leading to unpredictable token behavior or loss.

Zero Address Impact: Allowing the burn function to proceed without a zero address check may result in unintentional token burning, leading to token loss.

Tools Used

The audit of the DecentralizedStableCoin contract was performed manually with a thorough code review and security analysis. No automated tools were used for the assessment.

Recommendations

Negative Minting Check: Add a check in the mint function to ensure that the total supply plus the minted amount does not exceed the maximum allowed value for an uint256.

Zero Address Check: Include a check in the burn function to prevent burning tokens to the zero address (address(0)).