[CRITICAL] PULSE token has no supply cap — unbounded inflation via rewards and referrals

[grantfox-oss]

Summary

pulse_token/src/lib.rs mint (lines ~88–114) accepts any amount with no supply ceiling. total_supply can grow without bound. Every user action — claim, register_referral, reward, reward_bonus — mints fresh PULSE with no aggregate cap enforced.

Impact

• Infinite inflation: there is no MAX_SUPPLY; protocol inflation is unbounded by design.
• Economic dilution: early rewards lose value as supply is diluted by later minting.
• Governance bypass: any trusted minter can trigger unbounded issuance.

Fix

• Add a MAX_SUPPLY constant and check total_supply + amount <= MAX_SUPPLY in mint.
• Emit a SupplyCapEnforced event on initialization for transparency.
• Document the cap and the minting authority model.

[Johnpiii1]

hello
can i work on this pls

[grantfox-oss]

🦊 GrantFox — @Johnpiii1 has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #164)
2. Your PR will be reviewed by the SPulse-Org maintainers

Good luck! Track your progress on GrantFox.