First Flight #16: Mafia Takedown

Description

Any GangMember can quit the gang by calling Laundrette::quitGang function which doesn't account for the weapons they have withdrawn from the shelf hence they should return the weapons they have withdrawn to the godFather before they can quit

Impact

Any Gangmember can just quit after taking the weapons

Proof of Concept

1. User joins the gang with godFather's approval

2. User gets assigned some weapons

3. User takes the weapons

4. User quits by calling the Laundrette::quitGang function taking the weapons withdrawn along with him

Recommended Mitigation

There should be a check in Laundrette::quitGang function to ensure that the msg.sender has no weapons currently at his disposal before quitting.