Submission Details
Severity:
unwrapAndSendETH() can drain UnwrapAndSendETH.sol
Summary
unwrapAndSendETH（）can drain UnwrapAndSendETH.sol
Vulnerability Details
unwrapAndSendETH() lack of access control.
Anyone can use unwrapAndSendETH() to drain UnwrapAndSendETH.sol.
Impact
Anyone can call the unwrapAndSendETH() to unwrap WETH into ETH and send it to their, thus stealing funds from the contract.
Tools Used
Recommendations
Add access control check.
Updates
Lead Judging Commences
giovannidisiena about 1 year ago
Submission Judgement Published Reason: Design choice
Assigned finding tags:
Pipeline access control
Prize pool breakdown
Total prize
100,000 USDC
nSLOC
5,77617 USDC / LOC
95,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.