Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Valid

`GaugeController` can't call `setWeeklyEmission` in gauges

ke1caM

Summary

RAACGauge and RWAGauge have functions protected by onlyController but the GaugeController does not implement any functionality to use them.

Vulnerability Details

If we check the code implementation of GaugeController we can see that there are no functions that can interact with setWeeklyEmission and setMonthlyEmission. We can see that Gauges expect the GaugeController to call this functions since they are protected by onlyController modifier. Due to lack of implementation the GaugeController can't do it.

function setWeeklyEmission(
uint256 _weeklyEmission
) external onlyController {
periodState.emission = _weeklyEmission;
emit EmissionUpdated(_weeklyEmission);
}
function setMonthlyEmission(
uint256 _monthlyEmission
) external onlyController {
periodState.emission = _monthlyEmission;
emit EmissionUpdated(_monthlyEmission);
}

Impact

Due to lack of implementation GaugeController can't call some functions in the Gauges. Since the Gauges expect GaugeController to call them, this lack of implementation leads to disruption to the protocol's functionality.

Tools Used

Manual Review, Hardhat

Recommendations

Add functions to GaugeController that can call functions in Gauges protected by onlyController modifier.

Updates

Lead Judging Commences

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

`setWeeklyEmission`, `setBoostParameters`, `setEmission` and `setInitialWeight` cannot be called due to controller access control - not implemented in controller

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.