cjm00n
high
The mintRebalancer()
function in USSD.sol
can be called by any user. Anyone can call the function to arbitrarily manipulate the total supply of USSD and the reserved USSD in USSD contract.
The mintRebalancer()
function in USSD.sol
can be called by any user
function mintRebalancer(uint256 amount) public override {
_mint(address(this), amount);
}
Anyone can call the function to arbitrarily manipulate the total supply of USSD and the reserved USSD in USSD contract, which will affect the price of UUSD. So attacker can exploit this function to gain profit and destroy the exchange rate of USSD
function mintRebalancer(uint256 amount) public override {
_mint(address(this), amount);
}
Manual Review
Add onlyBalancer
modifier to the function