Anyone could change person's status by calling checkList
checkList
has no restrictions and it is callable by anyone
Manipulate s_theListCheckedOnce
mapping
Test:
Traces:
Manual review Foundry
Add onlySanta
modifier
Anyone is able to call checkList() changing the status of a provided address. This is not intended functionality and is meant to be callable by only Santa.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.