Submission Details
Severity:
TokenFactory::deployToken deploys any bytecode
Summary
Any bytecode is accepted and deployed by TokenFactory::deployToken(...).
Vulnerability Details
The deployToken(...) function takes arbitrary bytecode and deploys it. We assume the TokenFactory factory to only deploy ERC20 L1Token-like contracts. This is not guaranteed by this function.
Impact
Confusing to users and tricky for parties implementing/relying on the TokenFactory contract.
Tools Used
Manual review
Recommendations
Remove the contractBytecode parameter and deploy the token in a regular way.
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.