Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: medium
Invalid

Blocks per day is hardcoded to only work on ETH

Summary

Blocks per day is hardcoded to only work on ETH

Vulnerability Details

Block per day will only work on ETH as it's the only chain that has 12 second blocks:

https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/minters/RAACMinter/RAACMinter.sol#L28

//@audit but BLOCKS_PER_DAY is hardcoded only for ETH, what about base,arb...
uint256 public constant BLOCKS_PER_DAY = 7200; // Assuming 12-second block time

Impact

All others like ARB, BASE, POLY, OP, AVAX will no work properly. This is because it will configure the emissions wrong and would distribute too much, as emissions are per block and when one f the above chains has a block time of 2 seconds, the calculated emissions would be 6x as big.

uint256 public minEmissionRate = 100 * 1e18 / BLOCKS_PER_DAY; // 100 RAAC per day minimum
uint256 public maxEmissionRate = 2000 * 1e18 / BLOCKS_PER_DAY; // 2000 RAAC per day maximum

Tools Used

Recommendations

Consider having it as an argument in the struct instead of a hard-coded value.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

RAACMinter hardcoded BLOCKS_PER_DAY breaks cross-chain compatibility with variable token emission rates

Known issue LightChaser M12

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

RAACMinter hardcoded BLOCKS_PER_DAY breaks cross-chain compatibility with variable token emission rates

Known issue LightChaser M12

Appeal created

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Design choice
Assigned finding tags:

RAACMinter hardcoded BLOCKS_PER_DAY breaks cross-chain compatibility with variable token emission rates

Known issue LightChaser M12

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!