Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Unused Minter and Burner Role Implementation

calc1f4r

Summary

The contract implements setter functions, setminter and burner but does not use it in mint and burn functions.

https://github.com/Cyfrin/2025-02-raac/blob/89ccb062e2b175374d40d824263a4c0b601bcb7f/contracts/core/tokens/RToken.sol#L267
https://github.com/Cyfrin/2025-02-raac/blob/89ccb062e2b175374d40d824263a4c0b601bcb7f/contracts/core/tokens/RToken.sol#L277

Vulnerability Details

The contract implements setter functions:

function setBurner(address burner) external onlyOwner {
if (burner == address(0)) revert InvalidAddress();
_burner = burner;
emit BurnerSet(_burner);
}
​
function setMinter(address minter) external onlyOwner {
if (minter == address(0)) revert InvalidAddress();
_minter = minter;
emit MinterSet(_minter);
}

However, these roles are never checked or used in any function. The minting and burning functionality is controlled exclusively by the ReservePool through the onlyReservePool modifier:

Impact

Leftover code #QA

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

RToken minter and burner not used

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!