Submission Details
Severity:
front-run user withdraw by burnning tokens in `MOR :: burn` and cause a DOS attack
Summary
anyone can burn token just before you withdraw
Vulnerability Details
anyone can burn token just before you withdraw your funds .T his can lead to a DOS attack
of a user trying to withdraw funds and calling the withdraw function multiple times
Impact
unable to withdraw funds
Tools Used
manual
Recommendations
add a function modifier for the Owner
- function burn(uint256 amount_) public override {
ERC20Burnable.burn(amount_);
}
+ function burn(uint256 amount_) public onlyOwner override {
ERC20Burnable.burn(amount_);
}
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.