Submission Details
Severity:
Incorrect Minting Calculation in DebtToken.sol
Summary
The mint function contains a miscalculation when determining the amountToMint. The function incorrectly adds amount instead of amountScaled when computing the minting amount. This will lead to incorrect token issuance.
Vulnerability Details
Impact
-
Over-minting Risk:
The contract could mint more tokens than intended, leading to inflation.
Tools Used
Manual code review
Recommendations
- uint256 amountToMint = amount + balanceIncrease;
+ uint256 amountToMint = amountScaled + balanceIncrease;
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::mint miscalculates debt by applying interest twice, inflating borrow amounts and risking premature liquidations
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.