Submission Details
Severity:
Fees can possibly be left stuck in contract
Vulnerability Details
the Fees can be locked forever if the owner set the feeReceiver accidentally to the wrong address ( due to a typo in the address).
function setFeeReceiver(address _feeReceiver) external onlyOwner {
feeReceiver = _feeReceiver;
}
Impact
the Fees can be locked forever
Recommendations
using two step to change the the feeReceiver by creating two function with grant and claim mechanism
address grantedFeeReceiver ;
function grantFeeReceiver(address _feeReceiver) external onlyOwner {
grantedFeeReceiver = _feeReceiver ;
}
function claimFeeReceiver() external {
if (msg.sender != grantedFeeReceiver) revert();
feeReceiver = msg.sender ;
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.