Submission Details
Severity:
Users can burn their own MOR tokens
Vulnerability Details
burn() function in contracts/MOR.sol is
not restricted enough. As a consequence, an attacker could use external
methods, such as phishing, to fool legitimate users to burn their own
MOR tokens.
Impact
Lost of reward tokens
Tools Used
Manual Review
Recommendations
Restricting the ability of burning MOR tokens to the owner of the contract or to an appropriate authority, e.g: MOR-staking contract
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.