F-2025-0006·centralization-risk

Unbounded feeValue May Undermine User Trust

Acknowledgedescrowpaymentserc-20
TL;DR

setFeeValue allows the owner to set any fee amount without an upper limit, leaving users without assurance that fees will remain fair over time.

Severity
INFO
Impact
LOW
Likelihood
LOW
Method
MManual review
CAT.
Complexity
LOW
Exploitability
LOW
02Section · Description

Description

The setFeeValue(uint256 newFeeValue) function allows the contract owner to set any fee amount without restriction. There is no upper limit enforced in the contract logic.

While technically not a vulnerability, the lack of a maximum fee limit may raise concerns among users and integrators. Without clear boundaries, users have no assurance that fees will remain fair over time.

This uncertainty can erode trust in the protocol, especially in permissioned systems where owner actions directly affect user experience.

03Section · Recommendation

Recommendation

To build confidence and ensure predictability, consider introducing a sensible maximum cap on fees (e.g., 5%).

Alternatively, explicitly document that fees are fully discretionary and controlled by the owner, so users can make informed decisions before interacting with the protocol.

F-2025-0006

oog
zealynx

Smart Contract Security Digest

Monthly exploit breakdowns, audit checklists, and DeFi security research — straight to your inbox

© 2026 Zealynx