Submission Details
Severity:
reseed whitelist no access conditions for init
Summary
ReseedWhitelist.sol init has no access conditions,
/**
* @notice Whitelists Silo assets
*/
function init(address[] calldata tokens, AssetSettings[] calldata asset) external {
Vulnerability Details
In some situations, redeployment, updates, or expand of protocol, can be initiated with malicious list of tokens.
Impact
Broken layer L2 of protocol
Need of redeploy.
Some tracking bot/listener of competition can block proper initialization of this contract.
Tools Used
slither, hardhat, code analyze
Recommendations
add access conditions, temporary owner or dao as only capable to init or other conditions.
Prize pool breakdown
Total prize
250,000 USDC
nSLOC
12,28520 USDC / LOC
220,000 USDC
10,000 USDC
20,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.