Submission Details
Severity:
Inconsistent State Update Timing in Emergency Withdraw on FeeCollector.sol
Summary
The emergencyWithdraw function does not properly handle the state updates after transferring the emergency withdrawal. This could potentially lead to an inconsistent contract state in the event of unexpected failures or manual interventions.
Vulnerability Details
raacToken.safeTransfer(treasury, balance);
Impact
A failure to properly track emergency withdrawal activities could allow malicious actors to exploit inconsistencies in the contract.
Tools Used
Recommendations
Ensure that the contract state is updated immediately after transferring tokens.
uint256 balance = raacToken.balanceOf(address(this));
raacToken.safeTransfer(treasury, balance);
emit EmergencyWithdrawal(token, balance);
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.