Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: low
Valid

Any code related to boosts in veRAACToken contract should be removed.

Summary

It is unclear how boosts should be handled by the protocol. Currently, veRAACToken contract includes some boost features but they don't do anything in the end.

There is a BoostController contract that manages boosts, retrieving informations about locks veRAACToken balances from veRAACToken contract. It seems clear that this contract is the one handling boosts computation.

Impact

The impact of this issue is low, as it corresponds to a discrepancy in the implementation of boosts.

Tools Used

Manual review.

Recommendations

Make sure to remove all boosts related code in the veRAACToken contract, as BoostController is the contract handling it.

Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Protocol contains competing boost calculation implementations in different contracts that bypass each other, creating inconsistent rewards and breaking delegation mechanics

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.