Submission Details
Severity:
No withdrawal function are implemented for deposited funds in the entrypoint.
Description
MondrianWallet implements the addDeposit function to send funds to the EntryPoint. However, no withdrawal function is implemented, which will prevent users from retrieving the money they've sent if they no longer want to use it or if they've sent too much.
Risk
Likelihood: Low
When too many funds are sent to the contract (by the user or any other users).
Impact: High
Loss of funds
Recommended Mitigation
Implement a withdrawal function:
+ function withdrawDepositTo(address payable withdrawAddress, uint256 amount) public onlyOwner {
+ i_entryPoint..withdrawTo(withdrawAddress, amount);
+ }
Rewards breakdown
nSLOC
89This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.