Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Lock Duration Validation Gap in veToken Calculation

dharkartz

Summary

The calculateVeAmount function lacks minimum lock duration (MIN_LOCK_DURATION) validation, allowing extremely short lock periods that could destabilize the voting power system.

Vulnerability Details

While maximum duration is capped at MAX_LOCK_DURATION, the function omits minimum duration checks.

Impact

  • Enables micro-duration locks resulting in minimal veToken allocation

  • Potential governance mechanism disruption

  • Inefficient voting power distribution

Recommended Fix

Implement minimum duration validation:

function calculateVeAmount(uint256 amount, uint256 lockDuration) external pure returns (uint256) {
if (amount == 0 || lockDuration < MIN_LOCK_DURATION) return 0;
if (lockDuration > MAX_LOCK_DURATION) lockDuration = MAX_LOCK_DURATION;
return (amount * lockDuration) / MAX_LOCK_DURATION;
}
Updates

Lead Judging Commences

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.