Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Valid

veRAACTOKEN.sol contract has not implemented pause/unpause functions.

tamer

Summary

Contract has not implemented pause/unpause functions so the contract will always be paused = false
The whenNotPaused modifier will always let users interact with external functions.

Vulnerability Details

paused will be always false. No way of switching.
If in emergency the contract won't be able to be paused.

Impact

The lack of pause/unpause functions means that in the event of an emergency, the contract cannot be paused.
If a vulnerability is discovered or the contract is being exploited, the owner has no way of stopping it.

Tools Used

Manual

Recommendations

Add the following functions in the veRAACToken.sol contract.
Create two events:

  1. event Paused(address account)

  2. event Unpaused(address account)

​
+ function pause() external onlyOwner {
+ paused = true;
+ emit Paused(msg.sender);
+ }
+
+ function unpause() external onlyOwner {
+ paused = false;
+ emit Unpaused(msg.sender);
+ }
​
Updates

Lead Judging Commences

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

veRAACToken lacks the ability to configure `paused` variable

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.