First Flight #4: Boss Bridge

Summary

The L1BossBridge contract is missing essential getter functions and lacks proper access control mechanisms.

Vulnerability Details

The L1BossBridge contract is lacking essential getter functions to retrieve important contract state information, such as whether the contract is currently paused. Additionally, it's missing clarity on various internal states and lacks proper access control mechanisms for certain critical functions.

Impact

The absence of getter functions restricts user visibility into important contract states, potentially leading to confusion or misuse. The insufficient access control on the signer management function could compromise the bridge's integrity, allowing unauthorized individuals control.

Tools Used

Manual inspection

Recommendations

Implement relevant getter functions & improve access control