Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Valid

There is no function for taking allocated funds.

kupiasec

Summary

The Treasury.allocate() function allocates funds to recipients. However, there is no function for taking allocated funds. Therefore, recipients cannot take allocated funds from the treasury.

Vulnerability Details

The Treasury.allocate() function allocates funds to recipients.

https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/collectors/Treasury.sol#L87-L96

function allocateFunds(
address recipient,
uint256 amount
) external override onlyRole(ALLOCATOR_ROLE) {
if (recipient == address(0)) revert InvalidRecipient();
if (amount == 0) revert InvalidAmount();
​
@> _allocations[msg.sender][recipient] = amount;
emit FundsAllocated(recipient, amount);
}

However, there is no function for taking allocated funds.
Therefore, recipients cannot take allocated funds from the treasury.

Impact

Recipients cannot take allocated funds from the treasury.

Recommendations

There should be a function for taking allocated funds.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

What do people do with allocations

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!