Open code423n4 opened 1 year ago
0xA5DF marked the issue as low quality report
The burned reserve is the same amount that was 'donated' to reserve by the minter during minting
hansfriese changed the severity to QA (Quality Assurance)
hansfriese marked the issue as grade-b
hansfriese marked the issue as selected for report
hansfriese marked the issue as not selected for report
Lines of code
https://github.com/code-423n4/2023-04-frankencoin/blob/1022cb106919fba963a89205d3b90bf62543f68f/contracts/Frankencoin.sol#L194-L197
Vulnerability details
Impact
Minter can use large reservePPM value to arbitrarily change the reservePPM
Proof of Concept
}
The function takes the
reservePPM
as an arugument and use to reduce the minterReserveE6Tools Used
Manual review
Recommended Mitigation Steps
Use the reservePPM from the postion creation value.