15,000 USDC
Submission Details
Severity:
Centralisation RIsk: Owner Of `MErc20DelegateMadFixer` Can Take All Funds
Summary
steal all funds
Vulnerability Details
steal all funds , owner can choose an address that is incorrect
Impact
loss of funds
Tools Used
manual
Recommendations
sweep must be set automatically were the funds come from and not an address that the owner chooses.
add a function to validate the sweep address before the transfer is made
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
39438 USDC / LOC
14,000 USDC
1,000 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.