Submission Details
Severity:
Unrecoverable RTokens Due to Overly Restrictive rescueToken
Summary
The rescueToken function blocks RToken rescues, causing permanent loss if RTokens are accidentally sent to the contract.
Vulnerability Details
The rescueToken function reverts if tokenAddress == reserve.reserveRTokenAddress, making it impossible to recover mistakenly sent RTokens.
require(tokenAddress != reserve.reserveRTokenAddress, "Cannot rescue RToken");
Impact
Permanent Loss: RTokens sent to the contract are irrecoverable.
Protocol Imbalance: Incorrect RToken supply tracking.
Tools Used
Recommendations
Allow RToken rescue with admin oversight:
```solidity
if (tokenAddress == reserve.reserveRTokenAddress) {
require(recipient == owner(), "RTokens can only be rescued to owner");
}
```
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RToken::rescueToken() can never be called
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.