Submission Details
Severity:
BossBridgeToken's initial supply can be mint to anyone who deploys the contract
Summary
In L1Token.sol the constructor calls the _mint() method with no restrictions this will lead to BBT inflation.
Vulnerability Details
In L1token.sol the constructor implementation is:
constructor() ERC20("BossBridgeToken", "BBT") {
_mint(msg.sender, INITIAL_SUPPLY * 10 ** decimals());
}
it mints an amount of 10**(5+ decimals()) to whoever deploys the contract leading to a huge amount of BBT inflation .
Impact
Inflation of BBT token leading to decreasing its value.
Tools Used
Manual review
Recommendations
Check the success of safeTransferFrom() before emitting the event.
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.