Any external address can execute the unwrapAndSendETH function
The absence of an access control mechanism can cause any external address to trigger this function
This can cause unauthorised unwrapping and sending of eth
Manual Review
An appropriate access control mechanism can prevent this issue e.g Ownable.sol import from OpenZepplin
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.