Frankencoin - zhuXKET's results

Lines of code

https://github.com/code-423n4/2023-04-frankencoin/blob/1022cb106919fba963a89205d3b90bf62543f68f/contracts/Equity.sol#L313

Vulnerability details

Impact

Equity.restructureCapTable uses wrong index in a for loop. As a result, restructureCapTable will burn the first address only.

Proof of Concept

Equity.restructureCapTable burns shares of others to get all FPS shares.

        for (uint256 i = 0; i<addressesToWipe.length; i++){
            address current = addressesToWipe[0];
            _burn(current, balanceOf(current));
        }

But it burns only for the first address due to an index error.

Tools Used

Manual Review

Recommended Mitigation Steps

We should use index i instead of 0.