Submission Details
Severity:
In DebtToken.sol contract `_update` function emit `amount` in place of `scaledAmount`
Summary
in DebtToken.sol contract _update function emits amount but while updating it uses scaledAmount . so the emit amount is different .
Vulnerability Details
In DebtToken.sol contract _update function emits amount but while updating it uses scaledAmount . so the emit amount is different .
In super._update it takes scaledAmount and updates the parameters , but while emiting it emits amount .
super._update(from, to, scaledAmount);
emit Transfer(from, to, amount);// q why emit amount not scaledAmount .
function _update(address from, address to, uint256 amount) internal virtual override {
if (from != address(0) && to != address(0)) {
revert TransfersNotAllowed(); .
}
uint256 scaledAmount = amount.rayDiv(ILendingPool(_reservePool).getNormalizedDebt());
super._update(from, to, scaledAmount);
emit Transfer(from, to, amount);// q why emit amount not scaledAmount .
Impact
It will emit the
amountin place ofscaledAmount.
Tools Used
Manual Review
Recommendations
Emit the
scaledAmountin place ofamount.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.