Submission Details
Severity:
Fee-on-Transfer tokens cause accounting errors in the Treasury.sol.
Summary
Fee-on-Transfer tokens cause accounting errors in the Treasury.sol.
Vulnerability Details
Fee-on-Transfer tokens cause accounting errors in the Treasury contract.
For example, in deposit(), the actual received token amount is not verified, leading to a situation where the received amount is less than the specified amount.
https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/collectors/Treasury.sol#L46
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
Treasury::deposit increments _balances[token] with amount, not taking FoT or rebasing into account
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.