In the increase
function, there is no direct check to see if totalSupply() + amount
will exceed MAX_TOTAL_SUPPLY
. This may allow users to increase the locked amount without limit, potentially causing the total supply of veRAAC tokens to exceed the pre-set maximum limit.
Note: Although MAX_TOTAL_SUPPLY = 100,000,000e18
, this scenario could still occur! It is recommended to fix this issue.
Users can increase the locked RAAC token amount without limit, potentially causing the total locked RAAC tokens to exceed the maximum limit!
Add the check if (totalSupply() + amount > MAX_TOTAL_SUPPLY) revert TotalSupplyLimitExceeded();
in the increase
function.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.