Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: high
Valid

RToken::transfer transfers incorrect amount

Vulnerability Details

Before calling the super.transfer we are scaling the amount, but this is not needed because we are doing this in overridden _update function.

Impact

Wrong value will be transferred from sender to recipient.

Tools Used

Manaul Review

Recommendations

--- return super.transfer(recipient, scaledAmount);
+++ return super.transfer(recipient, amount);
Updates

Lead Judging Commences

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

RToken::transfer and transferFrom double-scale amounts by dividing in both external functions and _update, causing users to transfer significantly less than intended

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

RToken::transfer and transferFrom double-scale amounts by dividing in both external functions and _update, causing users to transfer significantly less than intended

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.