Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Valid

The checkList Function is Accessible to All Users

Summary

The checkList Function is Accessible to All Users

Vulnerability Details

The checkList function lacks the onlySanta modifier, making it callable by any user. This absence of access control could lead to unintended interactions with the function.

Impact

The lack of restricted access to the checkList function may result in incorrect first check statuses, as the function can be invoked by any user, not just the intended ones.

Tools Used

Foundry

Recommendations

To ensure proper access control, the onlySanta modifier should be added to the checkList function, similar to its implementation in the checkTwice function.

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Access Control on checkList()

Anyone is able to call checkList() changing the status of a provided address. This is not intended functionality and is meant to be callable by only Santa.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.