setFeeCollector
function in RAACToken contract is implemented as follows:
The problem arises because there is no check that _feeCollector != feeCollector
. This means it is possible to call setFeeCollector
and pass the same address as feeCollector
, which will emit a FeeCollectorSet
event while no new fee collector has been set.
The impact of this issue is low as it leads to wrong event emission.
Manual review
Add an additional check to ensure that _feeCollector != feeCollector
. That way, FeeCollectorSet
will never be emitted without actual modification of the fee collector address:
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.