Link to Affected Code:
Docs stated that :
Description:
The contract defines MAX_TOTAL_LOCKED_AMOUNT as 1 billion RAAC tokens, but this amount is mathematically impossible to achieve due to the veRAAC supply constraints. The maximum veRAAC supply is 100M tokens, and even with minimum lock duration (1 year), the maximum possible RAAC that could be locked is 400M tokens.
This occurs because:
veRAAC minting is based on: veRAAC = (RAAC * lockDuration) / MAX_LOCK_DURATION
MAX_TOTAL_SUPPLY of veRAAC is 100M tokens
Minimum lock duration (1 year) gives 0.25x ratio of RAAC:veRAAC
Therefore maximum RAAC possible to lock is 400M (100M/0.25)
This creates a misunderstanding because the initial plan was to have the capacity to lock 1b RAAC tokens but its never possible , because it reverts here if the locks goes above the MAX_TOTAL_SUPPLY
Impact:
User's cant lock more RAAC even thought the 1b cap hasnt been reached whileas the DOCs defined that 1b RAAC is possible to Lock
Documentation and economic models using this constant are incorrect
Proof of Concept:
Maximum RAAC lockable with 1 year duration (worst case):
Maximum RAAC lockable with 4 year duration (best case):
In both cases, reaching 1B RAAC locked is impossible.
Recommended Mitigation:
Adjust MAX_TOTAL_LOCKED_AMOUNT to reflect actual maximum:
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.