Submission Details
Severity:
`retrieveAdmin()` is not callable
Summary
retrieveAdmin() is not callable by anyone
Vulnerability Details
function retrieveAdmin() external {
kernel.executeAction(Actions.ChangeAdmin, kernel.executor());
}
This function is in the Laundrette contract so the admin, it's trying to call executeAction() that has the modifier onlyExecutor(), so the call will revert, since msg.sender was the admin, not the godfather
Impact
Admin cannot be changed anyone, except the owner if he bypasses retrieveAdmin() and call it directly to change the admin to his address
Tools Used
Manual review
Recommendations
Fix the bug
Updates
Lead Judging Commences
n0kto over 1 year ago
Submission Judgement Published Assigned finding tags:
`retrieveAdmin` not working
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.