Submission Details
Severity:
Arbitrary `from` passed to `transferFrom` (or `safeTransferFrom`)
Summary
Passing an arbitrary from address to transferFrom (or safeTransferFrom) can lead to loss of funds, because anyone can transfer tokens from the from address if an approval is made.
Impact
Can lead to loss of funds as anyone can transfer the tokens.
Tools Used
slither , aderyn , manual review
Recommendations
should make the from address to be defaulted as the gang's address
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.