Submission Details
Severity:
Missing MAX_WEEKLY_EMISSION Cap Check in RAACGauge::setWeeklyEmission Function
Summary
The setWeeklyEmission() function allows the contract controller to update the weekly emissions without any validation. This means an excessively high emission can be set, leading to unintended inflation or even breaking the emission schedule.
Vulnerability Details
function setWeeklyEmission(uint256 _weeklyEmission) external onlyController {
periodState.emission = _weeklyEmission; // ❌ No cap on emission
emit EmissionUpdated(_weeklyEmission);
}
There is no validation to ensure that _weeklyEmission does not exceed a maximum allowable limit (MAX_WEEKLY_EMISSION).
Impact
Excessive emissions can drastically increase token supply, leading to hyperinflation and reducing token value.
Tools Used
Manual Review
Recommendations
Modify the function to enforce a maximum cap for MAX_WEEKLY_EMISSION:
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.