F-2026-0017·uncollected-fee
_handleMint fee is computed but never collected
TL;DR
_handleMint subtracts tokenFee from the minted amount but never transfers the fee to feeCollector, so the fee is silently discarded on every mint operation.
Severity
LOW
Impact
LOW
Likelihood
HIGH
Method
MManual review
CAT.
Complexity
LOW
Exploitability
LOW
02Section · Description
Description
_handleMint calculates a tokenFee and subtracts it from the minted
amount, but never transfers the fee to feeCollector or anyone else.
03Section · Recommendation
Recommendation
Mint the fee to feeCollector:
solidity
function _handleMint(...) internal {...uint256 tokenFee =(recipient.amount * mctx.feeInfo.fee) / maxFeeRate;uint256 netAmount = recipient.amount - tokenFee;IMockERC20(permit.token).mint(recipient.recipientAddress, netAmount);if (tokenFee > 0)IMockERC20(permit.token).mint(feeCollector, tokenFee);}
04Section · Resolution
Resolution
YadaCoin, Confirmed.
Zealynx, Fixed.
Status
Fixed
