Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: high
Valid

`getTotalVotingPower` function in veRAACToken contract is wrongly implemented, leading to incorrect returned data and front-end integration issues.

tadev

Summary

getTotalVotingPower function in veRAACToken contract is defined as follows:

function getTotalVotingPower() external view override returns (uint256) {
return totalSupply();
}

This is incorrect because this function will return the total supply of veRAAC tokens, not taking into account the duration of locks.

Impact

The impact of this issue is medium as it leads to incorrect returned data and will cause front-end integration issues.

Tools Used

Manual review.

Recommendations

Currently, there is no way to retrieve the total voting power of the veRAAC holders. veRAACToken contract should be modified to allow retrieving the total voting power at a given timestamp. More specifically, the VotingPowerLib could track the total voting power in its VotingPowerState.

Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Time-Weighted Average Logic is Not Applied to Reward Distribution in `FeeCollector`

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Time-Weighted Average Logic is Not Applied to Reward Distribution in `FeeCollector`

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.