Submission Details
Severity:
Unlimited approve to other project contract
Summary
In constructor, contract BridgeSteth call unlimited approve in steth contract for unsteth contract.
Vulnerability Details
Unlimited approve to other contract(other project) is bad practice. Its dangerous. Even famous projects could be hacked.
Impact
If unsteth contract will be hacked, using this approve, tokens could be drained from contrac's balance.
Tools Used
Manual review
Recommendations
Call approve in each call.
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.