Summary

In ScrvusdVerifierV1.sol file

PARAM_SLOTS is defined with incorrect slot lookup.

Vulnerability Details

In ScrvusdVerifierV1.sol file

In uint256(keccak256(abi.encode(18, SCRVUSD)))

Solidity computes the storage slot of balanceOf[address] as:

keccak256(abi.encode(address, slot_index))

But in the contract, used keccak256(abi.encode(slot_index, address))

Impact

The extracted value for balanceOf(SCRVUSD) is incorrect.

This incorrect value is passed to the IScrvusdOracle.update_price() function, leading to:

• Incorrect price calculations.

• Potential manipulation of the scrvUSD price.

Tools Used

Manual

Recommendations

Need to modify as following.

uint256(keccak256(abi.encode(SCRVUSD, 18)))