Burned tokens can be re-minted into the `totalSupply`
Summary
Mor.sol inherits from ERC20Capped and regarding deployment scripts has a cap of 1000000000000000000000000
Vulnerability Details
The issue is that the contract also inherits from the ERC20Burnable contract, which means that when a user calls the burn method, the totalSupply will be subtracted from, meaning if 10 tokens existed and are all burned, but then 10 new tokens are minted, now totalSupply = 10 which is not the assumption that the protocol has because protocol wants the total supply of minted tokens to be maximum 1000000000000000000000000
Impact
Breaking of a core protocol invariant
Tools Used
VSCode
Recommendations
Remove the inheritance from ERC20Burnable in MOR.sol so that burning tokens with subtracting from totalSupply is not possible or overrid burn method
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.