Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: medium
Invalid

Missing Interface Inheritance potentially denying compliance

Summary

The LendingPool contract imports and relies on the IRAACHousePrices interface to interact with the RAACHousePrices oracle contract. However, RAACHousePrices does not explicitly inherit IRAACHousePrices. This creates a dangerous disconnect:

  • The compiler does not enforce that RAACHousePrices implements the interface's functions correctly (e.g., matching parameters, return types).

  • The LendingPool blindly assumes RAACHousePrices adheres to IRAACHousePrices, but there is no technical guarantee.


    ->

Vulnerability Details

The core issue is lack of explicit interface inheritance:

  • Developers assumed RAACHousePrices matches IRAACHousePrices by naming convention alone.

  • Solidity does not perform interface compliance checks unless a contract explicitly inherits the interface.

Impact

Lending pool contract is totally relying upon the interface compatibility for critical feature of the protocol getting price from oracle.

Recommendations

Modify RAACHousePrices to explicitly inherit IRAACHousePrices

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!