Submission Details
Severity:
`_ccipReceive` missing check for whitelisted sender.
Vulnerability Details
_ccipReceive function in WrappedTokenBridge.sol contract is missing check for whitelisted sender to receive message from, therefore tokens can be send to non-supported destination.
https://github.com/Cyfrin/2023-12-stake-link/blob/549b2b8c4a5b841686fceb9c311dca9ac58225df/contracts/core/ccip/WrappedTokenBridge.sol#L234
Impact
Tokens can be lost.
Tools Used
Manual review
Recommendations
Consider to use a mapping to check that sender is whitelisted , or use _verifyCCIPSender function as in SDLPoolCCIPController.sol contract.
function _ccipReceive(Client.Any2EVMMessage memory _message) internal override {
++ _verifyCCIPSender(_message);
if (_message.destTokenAmounts.length != 1) revert InvalidMessage();
address tokenAddress = _message.destTokenAmounts[0].token;
...
}
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419 USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.