Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Lack of validation for `setMonthlyEmission()` may allow setting emissions above the intended limit

0xcryptanu

Summary

Controller could set maxMonthlyEmission to be greater than 2.5M tokens.

Vulnerability Details

The setMonthlyEmission() function in the RWAGauge contract does not currently validate the _monthlyEmission parameter to ensure it is below the intended maximum of 2.5 million tokens. This could lead to a situation where the monthly emission is set to a value higher than the intended cap, potentially affecting the tokenomics and distribution strategy of the system.

function setMonthlyEmission(uint256 monthlyEmission) external onlyController {
periodState.emission = monthlyEmission; // @audit should check that _monthlyEmission is less than 2.5M tokens
emit EmissionUpdated(monthlyEmission);
}

Impact

Controller could set value for monthlyEmission greater than the expected max value of 2.5M tokens.

Tools Used

Manual Review

Recommendations

Add a validation check in the setMonthlyEmission() function to ensure that _monthlyEmission does not exceed MAX_MONTHLY_EMISSION. This can be done using a simple require statement:

require(_monthlyEmission <= MAX_MONTHLY_EMISSION, "Emission exceeds maximum limit");

This will prevent setting the monthly emission to a value higher than the allowed maximum, ensuring the integrity of the emission limits.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!