Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: high
Invalid

`RAACNFT.sol#mint`: incorrect charge amount

wiasliaw

Vulnerability Details

According to that price is scaled by 1e2, it is incompatible with the token for payment.

/// @dev https://github.com/Cyfrin/2025-02-raac/blob/89ccb062e2b175374d40d824263a4c0b601bcb7f/contracts/core/tokens/RAACNFT.sol#L32-L50
function mint(uint256 _tokenId, uint256 _amount) public override {
// scaled by 1e2
uint256 price = raac_hp.tokenToHousePrice(_tokenId);
​
if(price > _amount) { revert RAACNFT__InsufficientFundsMint(); }
​
// payment
token.safeTransferFrom(msg.sender, address(this), _amount);
}

Impact

The minter can mint NFTs at an excessively low price.

Tools Used

Manual.

Recommendations

Handle the fixed number scaling between pricing and payment token.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality
inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!