Submission Details
Severity:
`Constructor` of FjordPoints.sol doesn't set the `staking` contract address
Summary
Constructor of FjordPoints.sol doesn't set the staking contract address
Vulnerability Details
Constructor of FjordPoints.sol says to set staking contract & initializes the ERC20 token but it only initializes the ERC20 tokens
@dev Sets the staking contract address and initializes the ERC20 token
/**
* @dev Sets the staking contract address and initializes the ERC20 token.
*/
constructor() ERC20("BjordBoint", "BJB") {
owner = msg.sender;
lastDistribution = block.timestamp;
pointsPerEpoch = 100 ether;
}
Impact
onStake() & onUnStake() functions will revert as they are only called by staking contract
Tools Used
Manual Review
Recommendations
Set staking contract in contructor as said in natspecs
+ constructor(address stakingContract) ERC20("BjordBoint", "BJB") {
owner = msg.sender;
lastDistribution = block.timestamp;
pointsPerEpoch = 100 ether;
+ staking = stakingContract
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.