Decimal mismatch between `USDC` and `CrimeMoney` prevents equal 1 to 1 exchange of the tokens
Summary
USDC is a token with 6 decimal places and CrimeMoney is a token with 18 decimal places. Tthis causes a mismatch in the amount of tokens where 1 USDC is supposed to be equal to 1 CrimeMoney.
Vulnerability Details
As per the documentation, 1 USDC should be equal to 1 CrimeMoney and vice versa, but because USDC has 6 decimals and CrimeMoney has 18, this is not the case.
Impact
When a gang member deposits 1 USDC they will receive 0.0000000000001 CrimeMoney. This is not the intended 1 to 1 exchange of the tokens. However, with the current set up there will be no value lost, but there is an inconsistency in the amount of tokens being exchanged.
Tools Used
--Foundry
Recommendations
Adjust the precision accordingly so that there is a 1 to 1 exchange of USDC to CrimeMoney.
Lead Judging Commences
USDC decimals not handled
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.