Steadefi

Steadefi
DeFiHardhatFoundryOracle
35,000 USDC
View results
Submission Details
Severity: high
Invalid

Lack of Access Control

Summary

The 'compound' function is marked as external but there are no checks to ensure that only authorized addresses can call it.

Vulnerability Details

The function is marked as external but there are no access control checks to ensure that only authorized addresses can call it.

Impact

If unauthorized addresses are able to call this function, they could potentially manipulate the contract state in a way that's not intended.

Tools Used

Slither, Manual Review

Recommendations

Implement access control mechanisms, such as Ownable or Roles, to restrict who can call this function.

Updates

Lead Judging Commences

hans Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.