Submission Details
Severity:
Incorrect token minting recipient in FjordToken contract
Summary
Incorrect token minting recipient in FjordToken contract.
Vulnerability Details
In the FjordToken contract, the initial token supply is minted to the deployer of the contract (msg.sender) instead of the FjordAuction contract.
contract FjordToken is ERC20 {
constructor() ERC20("Fjord Foundry", "FJO", 18) {
_mint(msg.sender, 100_000_000 ether);
}
}
The constructor mints the initial token supply to msg.sender, which is the address deploying the FjordToken contract.
Impact
The FjordAuction contract will not have the tokens it needs to transfer.
Tools Used
Manual review
Recommendations
Modify the FjordToken constructor to accept the FjordAuction contract address and mint tokens directly to it.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.