First Flight #10: One Shot
First Flight #10
Beginner FriendlyFoundryNFT
100 EXP
View results
Previous Next
Submission Details
Severity: medium
Invalid

Missing events access control, leading to difficulty in tracking changes in `OneShot.sol`

i3arba

  • Description:

    • Detect missing events for critical access control parameters

  • Impact:

    • A malicious user can take control of the SmartContracs and update the addresses unnoticed

  • Proof of Concept:

    `OneShot.sol::setStreetsContract`
    function setStreetsContract(address streetsContract) public onlyOwner {
    _streetsContract = Streets(streetsContract);
    @>
    }
Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.