WrappedTokenBridge.transferTokens is unnecessary restricted
Summary
WrappedTokenBridge.transferTokens has onlyOwner modifier, but it's almost equivalent to WrappedTokenBridge.onTokenTransfer functionality except for user to be able to pay in native.
Vulnerability Details
WrappedTokenBridge.transferTokens have onlyOwner modifier which forbids regular users to use this function, but it seems reduntant because it has nothing with admin functionality and only allows users to choose to pay in native instead always in LINK as in the case of onTokenTransfer.
Impact
Users can't pay with native currency for cross chain wrapped token transfers.
Tools Used
Manual review
Recommendations
Remove onlyOwner modifier
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.