Incorrect event emitted during RToken minting
Summary
The third parameter in the Mint event reflects the underlying assets balance of the user, it is derived as the unscaled minted amount + accrued interests. The event currently is emitted as:
The accrued interests are not being included.
Vulnerability Details
Impact
This will just affect monitoring systems.
Tools Used
Manual review.
Recommendations
Add accrued interests.
Lead Judging Commences
RToken::mint calculates balanceIncrease (interest accrued since last interaction) but never mints it, causing users to lose earned interest between deposits
The balanceIncrease is the interest that has already accrued on the user's existing scaledBalance since their last interaction. It's not something you mint as new tokens in the _mint function.
RToken::mint calculates balanceIncrease (interest accrued since last interaction) but never mints it, causing users to lose earned interest between deposits
The balanceIncrease is the interest that has already accrued on the user's existing scaledBalance since their last interaction. It's not something you mint as new tokens in the _mint function.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.