Core Contracts

Summary

The RAAC protocol lacks event emissions in critical functions across multiple smart contracts, including LendingPool.sol, StabilityPool.sol, and others. Events are essential for transparency, off-chain monitoring, and debugging. Their absence limits visibility into crucial operations like lending, borrowing, liquidation, and stability pool interactions, increasing the risk of undetected issues and making it difficult for users and auditors to track protocol activities effectively.

Vulnerability Details

Missing Event Emissions

Several key functions across the protocol lack proper event emissions.

Without event emissions, off-chain monitoring tools like blockchain explorers, analytics dashboards, and security monitoring systems cannot track protocol activities. This results in:

• Reduced transparency for users and auditors.

• Difficulty in debugging protocol interactions.

• Increased risk of unnoticed protocol failures or exploits.

• Limited ability to create automated alerting mechanisms.

Impact

The lack of event emissions affects protocol usability and security in multiple ways:

• Monitoring & Auditing: Users, developers, and auditors rely on events to track actions and diagnose issues. The absence of events makes security monitoring difficult.

• User Trust & Transparency: Users need clear transaction records to verify deposits, borrows, repayments, and other critical actions.

• Automated Tools & Indexing: DApps, explorers, and third-party services use event logs to track on-chain activity. Without them, integrating RAAC with analytics platforms becomes challenging.

Tools Used

Manual Review

Recommendations

To improve transparency, security, and usability, add appropriate event emissions in all critical functions.