First Flight #4: Boss Bridge

Summary

The contarct L1Token does no implement any mint or burn function.

Vulnerability Details

This means that for any user to use the protocol, the deployer has to physically transfer his minted tokens to other users. This is not a practical way to ensure users will stake their tokens in the protocol. Plus, this does not give value to the protocol tokens. As there is no staking mechanism that would ensure an equal value between BBT and the stake, BBT has currently no value.

Impact

High, no incentives to use the protocol. No way for users to mint.

Tools Used

Foundry

Recommendations

• Implement the mint and burn functions in L1Token

• Implement a staking/CDP logic that would ensure that BBT has value backed by something.