Submission Details
Severity:
Can't set feeCollector to zero address through RAACMinter
Vulnerability Details
RAACToken contract has the functionailty of removing feeCollector when they do not want to charge tax on swap of tokens.
If protocol decides to change feeCollector to zero address, they won't be able to do it through the RAACMinter::setFeeCollector because of the zero address check condition.
Impact
Protocol won't be able to change RAACToken::feeCollector to zero address through RAACMinter::setFeeCollector because of zero address check.
Tools Used
Manual Review
Recommendations
Remove the check for zero address from RAACMinter:setFeeCollector
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
RAACMinter::setFeeCollector prevents disabling fees by blocking zero address assignment
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.