The 'compound' function is marked as external but there are no checks to ensure that only authorized addresses can call it.
The function is marked as external but there are no access control checks to ensure that only authorized addresses can call it.
If unauthorized addresses are able to call this function, they could potentially manipulate the contract state in a way that's not intended.
Slither, Manual Review
Implement access control mechanisms, such as Ownable or Roles, to restrict who can call this function.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.