Submission Details
Severity:
Token WhiteListing mapping can't be organized after deployment
Summary
Token's address may change or being malicious in some cases
Vulnerability Details
Token address may change or become malicious for the protocol in future and there's no way to remove the token from whitelisting.In case of needed pause of transaction of certain token there's no method of setting token out of whitelist.
Impact
Potential loss of funds caused by malicious token settings and there's no rectifiying the whitelisting mapping.
Tools Used
Manuel overview
Recommendations
Owner can use this function to change token mappings in case of needed...
event SetWhiteListingToken(address indexed token,bool isTokenOk);
function setWhiteListing(address _token, bool _isTokenOk)
public
onlyOwner
{
whitelistedTokens[_token]=_isTokenOk;
emit SetWhiteListingToken(_token,_isTokenOk);
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.