Submission Details
Severity:
`GMXVault::mintFee()` ,GMXVault::mint() minting operation revert
Summary
the minting operation may fail and revert in case of issues.
Vulnerability Details
GMXVault::mintFee()
function mintFee() public {
@> _mint(_store.treasury, GMXReader.pendingFee(_store));
_store.lastFeeCollected = block.timestamp;
}
GMXVault::mint()
function mint(address to, uint256 amt) external onlyVault {
@> _mint(to, amt);
}
Impact
If there are any issues like exceeding the token's maximum supply, you are minting fees to an address, an attacker might find a way to call the mint function and create new tokens without proper authorization.
Tools Used
Manual Review
Recommendations
Using safeMint instead of mint can make the code more safe.
Prize pool breakdown
Total prize
35,000 USDC
nSLOC
2,28915 USDC / LOC
33,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.