Submission Details
Severity:
No check for MAX_MONTHLY_EMISSION in RWAGauge::setMonthlyEmission
Summary
The setMonthlyEmission function allows the contract controller to update the monthly emissions without any validation. This means an excessively high emission can be set, leading to unintended inflation or even breaking the emission schedule.
Vulnerability Details
function setMonthlyEmission(uint256 _monthlyEmission) external onlyController {
periodState.emission = _monthlyEmission;
emit EmissionUpdated(_monthlyEmission);
}
}
There is no validation to ensure that _monthlyEmission does not exceed a maximum allowable limit (MAX_MONTHLY_EMISSION).
Impact
Excessive emissions can drastically increase token supply, leading to hyperinflation and reducing token value.
Tools Used
Manual Review
Recommendations
Modify the function to enforce a maximum cap for MAX_MONTLY_EMISSION:
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.