Submission Details
Severity:
Anyone can call runLiquidation
Summary
runLiquidation function does not have any type of access control
Vulnerability Details
Lack of access control on runLiquidation method can lead to potential issue like liquidating before or after a required time.
Impact
Anyone can call runLiquidation which can create problem for protocol if it is called at an inappropriate time.
Tools Used
Manual code review
Recommendations
The recommendation is made for implementing access control like onlyowner or specify a role for function of runLiquidation to make it impossible for normal user to call it.
- function runLiquidation(uint256 _tokenId) external {
+ function runLiquidation(uint256 _tokenId) external onlyOwner {
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Lack of quality
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.