Arbitrary `account` parameter in `MoneyShelf::depositUSDC` allows gang members to steal USDC from each other

Updates

n0kto Lead Judge 4 months ago

Submission Judgement Published

Validated

Assigned finding tags:

Rewards breakdown

nSLOC

205

This contest has a flat reward structure with the following payouts:

High

100 EXP

Medium

20 EXP

Low

2 EXP

The contest is live. Earn rewards by submitting a finding.

Submissions are being carefully reviewed by our judges.

This is your time to appeal against judgements on your submissions.

Appeals are being carefully reviewed by our judges.

The contest is complete and the rewards are being distributed.

Support

Can’t find an answer? Join our Discord or follow us on Twitter.