Submission Details
Severity:
Unrestricted Monthly Emission Settings
Summary
The setMonthlyEmission function lacks safeguards against excessive emission rates, as it does not implement an upper limit on monthly emission values.
Vulnerability Details
The current implementation allows unrestricted emission values:
function setMonthlyEmission(uint256 _monthlyEmission) external onlyController {
periodState.emission = _monthlyEmission;
emit EmissionUpdated(_monthlyEmission);
}
Impact
Unrestricted emission settings could lead to:
Uncontrolled token inflation
Destabilization of token economics
Tools Used
Manual code review
Recommendations
Introduce a
MAX_MONTHLY_EMISSIONcap:
function setMonthlyEmission(uint256 _monthlyEmission) external onlyController {
require(_monthlyEmission <= MAX_MONTHLY_EMISSION, "Exceeds maximum allowed emission");
periodState.emission = _monthlyEmission;
emit EmissionUpdated(_monthlyEmission);
}
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.