Core Contracts

Summary

Based on the documentation, the token distribution should be 65% of the total supply. However, upon review, it was found that the actual token distribution accounts for 65.1%, which deviates from the expected allocation.

Vulnerability Details

The smart contract RAACReleaseOrchestrator implements vesting schedules for the initial token distribution. The allocations defined in the constructor indicate the percentage of tokens assigned to various categories:

• Team: 18% (18,000,000 tokens)

• Advisor: 10.3% (10,300,000 tokens)

• Treasury: 5% (5,000,000 tokens)

• Private Sale: 10% (10,000,000 tokens)

• Public Sale: 15% (15,000,000 tokens)

• Liquidity: 6.8% (6,800,000 tokens)

Adding up these allocations results in a total of 65.1% of the total supply, which exceeds the expected 65% distribution as stated in the contract documentation. This discrepancy suggests an inconsistency between the intended allocation and the actual implementation, which may lead to potential issues in token management and supply control.

Impact

The deviation in token allocation could have several consequences, including:

• Over-allocation of tokens: The extra 0.1% may lead to an imbalance in the vesting schedule, affecting the intended distribution of tokens.

• Potential loss of trust: If stakeholders and investors expect a strict 65% allocation, exceeding this amount may raise concerns about contract accuracy and governance.

Tools Used

Manual review

Recommendations

Review and correct the allocation percentages to ensure they sum up to exactly 65%.