MorpheusAI

Summary

Stakers will not be able to claim their MOR rewards if it hits its cap limit.

Vulnerability Details

• MOR token is the project tokens that is going to be minted to the pool stakers and developeres, and these rewards will be minted on Arbitrum chain.

• MOR token implements OZ.ERC20Capped , where it enforecs a cap to the totalSupply when minting tokens, and the value of the cap is set when the token contract is deployed

  constructor(uint256 cap_) ERC20("MOR", "MOR") ERC20Capped(cap_) {}

• So with each mint, the totalSupply is checked against cap, if it's greater than the cap then the mint will revert.

Impact

When the MOR token reaches its cap, no more rewards can be minted to the stakers.

Proof of Concept

MOR token constructor

Tools Used

Manual Review.

Recommendations

A solution to minimalize users rewards losses is to block/disable the staking in pools if the MOR reaches its cap.