Submission Details
Severity:
ERC20 operations not overwritten
Summary
All ERC20 operations are not overwritten and can be called by users, without using any other function of the contract.
Vulnerability Details
No ERC20 overwritten function in any contract of the protocol.
Impact
Misalignment between accounts balances in the Shelf contract and all the real movements
Tools Used
Manual review
Recommendations
Overwrite ERC20 transfer and transferFrom functions
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.