Submission Details
Severity:
Missing Upper Bounds for Weekly Emissions
Summary
The setWeeklyEmission function lacks a maximum emission cap, allowing the controller to set arbitrarily high weekly emission rates that could destabilize the token economics.
Vulnerability Details
The implementation permits unrestricted setting of emission values:
function setWeeklyEmission(uint256 _weeklyEmission) external onlyController {
periodState.emission = _weeklyEmission;
emit EmissionUpdated(_weeklyEmission);
}
Without upper bounds validation, the system remains vulnerable to potentially harmful emission rates.
Impact
Risk of token value dilution through excessive emission rates
Potential disruption of economic incentives and reward mechanisms
Tools Used
Manual code review
Recommendations
Implement a maximum emission limit through a
MAX_WEEKLY_EMISSIONconstant:
function setWeeklyEmission(uint256 _weeklyEmission) external onlyController {
require(_weeklyEmission <= MAX_WEEKLY_EMISSION, "Exceeds maximum emission limit");
periodState.emission = _weeklyEmission;
emit EmissionUpdated(_weeklyEmission);
}
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.