Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: low
Invalid

Immutable RAAC Token Address in RAACReleaseOrchestrator Contract

Summary

The RAACReleaseOrchestrator contract sets the raacToken variable as immutable during construction. There is no setter function provided to update this variable. Consequently, if an incorrect RAAC token address is provided during deployment, the contract cannot be upgraded or modified to use the correct token address, potentially limiting operational flexibility.

IRAACToken public immutable raacToken; // <-
.
.
.
constructor(address _raacToken) {
if (_raacToken == address(0)) revert InvalidAddress();
raacToken = IRAACToken(_raacToken); // <-
// ...
}

Recommendations

Careful Deployment Verification:

Ensure that the correct RAAC token address is thoroughly verified before deployment.

Consider Proxy Pattern (if upgradeability is desired):

If future flexibility is a concern, consider using an upgradeable proxy pattern. This allows changes to critical parameters like the token address post-deployment.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!