Summary

In the RToken.sol contract, the calculateDustAmount function incorrectly scales the contract's underlying asset balance by dividing it by the normalized income, leading to an underreported dust amount.

Vulnerability Details

The issue occurs in the calculateDustAmount function:

The function incorrectly scales down the contract's actual balance by dividing it by the normalized income. The underlying asset balance represents real tokens and should not be scaled, as it's already in the correct denomination.

This impacts functions that rely on dust calculation:

• transferAccruedDust

Impact

The impact is High because it causes the dust amount to be incorrectly reported as lower than actual

Tools Used

• Manual code review

Recommendations

Remove the scaling operation from the contractBalance calculation in calculateDustAmount()