First Flight #5: Santa's List
First Flight #5
Submission Details
Severity: high
Valid`SantasListTest: testPwned` executes arbitrary operation on caller machine, can take control over the machine to drain funds or leak info
Updates
Lead Judging Commences
Submission Judgement Published
Validated
Assigned finding tags:
test_pwned FFI vulnerability
The FFI variable within Foundry.TOML was set to TRUE. This variable gives foundry shell access and allows it to run commands on your terminal. The possibility of exploitation through this means are endless! This repo exploited this flag through test_pwned Keep an eye out before running tests!
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
High
100 EXP
Medium
20 EXP
Low
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.