Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Failure to implement the ICurveCrvUSDVault interface will cause anomalies

0xseverityhunter

Summary

The ICurveCrvUSDVault interface was defined but wasn't declared or implemented

Vulnerability Details

The CurveVault smart contract wasn't written and only the interface exists without importations as seen here; https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/interfaces/curve/ICurveCrvUSDVault.sol

This will cause certain anomalies in functions that call the interface, take for example this function

function _depositIntoVault(uint256 amount) internal {
IERC20(reserve.reserveAssetAddress).approve(address(curveVault), amount);
curveVault.deposit(amount, address(this));
totalVaultDeposits += amount;
}

Tools Used

Manual Analysis

Recommendations

The CurveVault should be written with its functions implemented so as to enable the functions called to be carried out without fail as the protocol relies heavily on it

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Out of scope

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!