Submission Details
Severity:
`TempleGold::_getMintAmount` does not count mintAmount correctly
Summary
TempleGold::_getMintAmount counts mint amount in the wrong way, which will lead to minting maximum supply of token immediately
Vulnerability Details
TempleGold::_getMintAmount has a broken formula. It counts how many tokens to mint for the particular period:
mintAmount = TempleMath.mulDivRound((block.timestamp - _lastMintTimestamp) * (MAX_SUPPLY), vestingFactorCache.numerator, vestingFactorCache.denominator, false);
They take seconds passed and should divide it by one year in seconds, to take a correct slice from the MAX_SUPPLY. Currently, if neglect by vesting factor for simplicity, when 1 second passed, mintAmount would equal to MAX_SUPPLY already.
Impact
Will count mint in the wrong way
Tools Used
Manual review
Recommendations
Fix the formula by dividing it by the one year
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.