Submission Details
Severity:
SIGNATURE_NO_PROTOCOL_PINNING
Summary
Signature from other contract or protocol can be valid for the bridge
Vulnerability Details
Contract name or protocol name is not pinned in the message. Signature from another protocol can be a valid signature for the bridge
Impact
Withdraw using signature from other protocol
Tools Used
Recommendations
Add contract name or protocol name to the message to sign
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.