openzeppelin-contracts/certora/specs/ERC20FlashMint.spec

import "erc20.spec"

methods {
    maxFlashLoan(address) returns(uint256) envfree
    _burn(address account, uint256 amount) returns(bool) => specBurn(account, amount)
}

ghost mapping(address => uint256) trackedBurnAmount;

function specBurn(address account, uint256 amount) returns bool {   // retuns needed to overcome current CVL limitations: "could not type expression "specBurn(account,amount)", message: A summary must return a simple type, but specBurn(account,amount) returns 'void'"
    trackedBurnAmount[account] = amount;
    return true;
}


// STATUS - verified
// fee + flashLoan amount is burned
rule letsWatchItBurns(env e){
    address receiver; address token; uint256 amount; bytes data;

    uint256 feeBefore = flashFee(e, token, amount);

    flashLoan(e, receiver, token, amount, data);

    uint256 burned = trackedBurnAmount[receiver];

    assert to_mathint(amount + feeBefore) == burned, "cheater";
}