Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Valid

Uninitialized Pause State in `veRAACToken` Leads to Non-functional Emergency Stop

zgczgc

Summary

The veRAACToken contract inherits from OpenZeppelin's Pausable contract but never initializes the paused state variable. Since the default value for booleans in Solidity is false, this means the contract can never be paused because:

  1. The paused state defaults to false

  2. No function is found that calls _pause() to set it to true

  3. The whenNotPaused modifier will always pass its check since paused is always false

Impact

  • This effectively makes the emergency stop functionality non-functional, removing an important safety mechanism from the contract.

Recommendations

Add Pause Control Functions

contract veRAACToken is ERC20, Pausable {
+ function pause() external onlyOwner {
+ _pause();
+ }
+
+ function unpause() external onlyOwner {
+ _unpause();
+ }
}
Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

veRAACToken lacks the ability to configure `paused` variable

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!