Submission Details
Severity:
Functions Guaranteed to revert when called by normal users can be markd `payable`
Summary
The onlyOwner modifier makes a function revert if not called by the address registered as the owner
Vulnerability Details
https://github.com/Cyfrin/2023-07-beedle/blob/main/src/utils/Ownable.sol#L19
File:
19 function transferOwnership(address _owner) public virtual onlyOwner {
https://github.com/Cyfrin/2023-07-beedle/blob/main/src/Beedle.sol#L36
File: src/Beedle.sol
36 function mint(address to, uint256 amount) external onlyOwner {
https://github.com/Cyfrin/2023-07-beedle/blob/main/src/Lender.sol
File: src/Lender.sol
84 function setLenderFee(uint256 _fee) external onlyOwner {
92 function setBorrowerFee(uint256 _fee) external onlyOwner {
100 function setFeeReceiver(address _feeReceiver) external onlyOwner {
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.