Submission Details
Severity:
Incorrect burrned amount into DebtToken.sol
Summary
Vulnerability Details
The burn function contains a critical miscalculation where the _burn function is called with amount.toUint128() instead of amountScaled.
Impact
The function burn wrong amount of tokens
Tools Used
Manial review
Recommendations
uint256 amountScaled = amount.rayDiv(index);
if (amountScaled == 0) revert InvalidAmount();
-
_burn(from, amount.toUint128());
-
_burn(from, amountScaled);emit Burn(from, amountScaled, index);
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::burn incorrectly burns amount (asset units) instead of amountScaled (token units), breaking token economics and interest-accrual mechanism
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::burn incorrectly burns amount (asset units) instead of amountScaled (token units), breaking token economics and interest-accrual mechanism
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.