Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Lack of Events for Critical State Changes

m3ntor

Summary

https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/tokens/veRAACToken

Vulnerability Details

Certain functions that modify the contract’s state do not emit events. Specifically:

setMinter(address _minter): Updates the minter address but does not emit an event.

_updateBoostState(address user, uint256 newAmount): Updates the boost calculation but does not emit an event.

Impact

Reduces transparency and makes it harder to track state changes off-chain.

Hinders debugging and monitoring by external tools.

Tools Used

Manual Review

Recommendations

Add events for state-changing functions to enhance observability. For example:

Call these events inside the respective functions.

event MinterUpdated(address indexed newMinter);
event BoostStateUpdated(address indexed user, uint256 newAmount);
Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.