First Flight #19: Mondrian Wallet v2

Beginner FriendlyFoundry
100 EXP
Submission Details
Severity: high
Valid

Unprotected UUPS:_authorizeUpgrade() allows anyone to change the implementation to a malicious one and steal user's funds

Updates

Lead Judging Commences

Bube Lead Judge 2 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Lack of access control in _authorizeUpgrade

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.