sechub
HomeServicesAssetsJobsFindingsTicketsGovCheck
Guest Mode. Click here to sign in and access all features

    BTB contract is not configured to receive and claim ETH yield

    Blast the balloon SC Audit

    Severity
    Medium
    Status
    Fixed
    Location(s)

    46c5befd5fe4856c1108fc33849cbbc704c23a6b/contracts/BTB.sol

    Description

    Smart contracts on Blast can earn yield on the native ETH that they hold. This feature however is opt-out by default on smart contracts in order to maintain as much as possible backward compatibility with code that may rely on the ETH balance to not change. In the case of Blast, yield is gained through ETH itself, as it is a rebase token.

    The BTB contract does not call any of the required function to activate yield generation, as such it will lose any potential rewards for the ETH held in it.

    Recommendation

    There are two ways of accruing yield for a smart contract:

    • Automatic: native ETH balance rebases (increasing only)
    • Claimable: ETH balance never changes; yield accumulates separately

    Each of the above methods requires different function calls to the Blast yield contract. More on the mechanism of yield generation on the docs.blast.io page.

    Modify the BTB contract to use one of the two methods of accruing and claiming native yield.

    Comments
    No comments yet

    BTB contract is not configured to receive and claim ETH yield

    Blast the balloon SC Audit

    Severity
    Medium
    Status
    Fixed