Submission Details
Severity:
_maturityDate should be checked if is in the future
Summary
_maturityDate is not being checked if is in the future and no function can change it if not.
Vulnerability Details
_maturityDate should be checked if is in the future else it could break the contract
https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/zeno/ZENO.sol#L20-L29
constructor(
address _usdc,
uint256 _maturityDate,
string memory _name,
string memory _symbol,
address _initialOwner
) Ownable(_initialOwner) ERC20(_name, _symbol) {
USDC = IERC20(_usdc);
MATURITY_DATE = _maturityDate;
}
Impact
_maturityDate is not being checked if is in the future, currently there is no way to change it if not, this could potentially break the contract.
Tools Used
manual
Recommendations
check if _maturityDate > block.timestamp
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.