Submission Details
Severity:
Any address can mint any amount of stETHMock Tokens
Summary
Due to absence of necessary function guards in mint function users can mint unlimited amount of tokens
Vulnerability Details
function setUp() public {
stETHMock = new StETHMock();
}
function testCanMintToAnyAddress() public {
vm.prank(address(1));
stETHMock.mint(msg.sender, 100e18);
//balanceOf(address(1)) will be equal to 100e18
}
The above poc demonstrates that any address can mint tokens to them selves however they wish.
Impact
Users can mint unlimited number of tokens at no cost. This can also render the MOR token distribution process flawed.
Tools Used
Manual Review
Recommendations
Consider adding appropriate role guards to the mint function or making users exchange ether for stETHMock tokens
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
Lack of access control in `StETHMock:mint` and `WStETHMock::mint`
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.