First Flight #15: Mondrian Wallet
First Flight #15
Beginner FriendlyFoundry
100 EXP
View results
Previous Next
Submission Details
Severity: medium
Invalid

`MondrianWallet::validateUserOp` always calls `MondrianWallet::_payPrefund(uint256 missingAccountFunds)` resulting in payments being made from invalid UserOperations.

poolig4n

Description

The function MondrianWallet::validateUserOp function always calls MondrianWallet::_payPrefund(uint256 missingAccountFunds) resulting in payments being made from invalid UserOperations. This may lead to incorrect payments being made to an account with no way to recover them from the original owner.

Impact

Funds potentially payed incorrectly

Recommended mitigation

The MondrianWallet::validateUserOp function should only call MondrianWallet::_payPrefund if the UserOperation is valid.

Tools Used

  • Manual Review

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.