Submission Details
Severity:
Lack of access control for `updateCountMartenitsaTokensOwner`
Summary
updateCountMartenitsaTokensOwner in MartenitsaToken.sol should be properly access controlled for the protocol to work properly.
Vulnerability Details
Since the function can be called anyone by passing in a proper address and operation, user balance of MartenitsaTokens are fully compromised.
Impact
User balance of tokens compromised, further logic which is dependant on the logic fails.
Tools Used
Manual Review
Recommendations
Add proper access control for the updateCountMartenitsaTokensOwner function.
Rewards breakdown
nSLOC
239This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.