Submission Details
Severity:
Burn functions must be protected with a modifier
Burn functions must be protected with a modifier
Severity: Low
Confidence: High
Description
If burn functions are not protected by a modifier, any address may be able to burn tokens, potentially leading to financial loss. A common modifier to use is onlyOwner.
There are 1 instances of this issue:
File: contracts/tokens/Ditto.sol
45 function _burn(address account, uint256 amount)
46 internal
47 override(ERC20, ERC20Votes)
48
Burn function without a protective modifier.
https://github.com/Cyfrin/2023-09-ditto/blob/main/contracts/tokens/Ditto.sol#L45-L50
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.