Submission Details
Severity:
Privilege Escalation from Compromised Owner
Summary
Many sensitive operations are not protected from a compromised owner.
Vulnerability Details
Functions like setAssetOracle, createMarket, transferOwnership do not have protections if the owner address is compromised.
A breach of the owner account could allow taking control of markets and settings.
Impact
Attacker could control markets and system configuration if owner account is compromised.
Tools Used
Manual
Recommendations
Use a timelock for sensitive owner operations
Implement an owner recovery process
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.