Submission Details
Severity:
Cannot withdraw from MoneyVault in case of Emergency
Summary
Cannot withdraw from MoneyVault in case of Emergency.
Vulnerability Details
Only MoneyShelf can call the burn function in the CrimeMoney contract due to the modifier onlyMoneyShelf
function burn(address from, uint256 amount) public onlyMoneyShelf {
_burn(from, amount);
}
MoneyValut's withdrawUSDC will revert since it calls burn from the MoneyVault contract, denying USDC withdrawal.
Impact
Funds will be stuck in the contract forever
Tools Used
Manual Review
Recommendations
Fix the bug
Updates
Lead Judging Commences
n0kto over 1 year ago
Submission Judgement Published Assigned finding tags:
MoneyVault cannot burn or mint CrimeMoney
Godfather can add the role manually
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.