Submission Details
Severity:
`MondrianWalletV2` can't receive ETH transfer
Summary
The smart contract wallet MondrianWallet2 can't receive ETH transfer.
Vulnerability Details.
MondrianWallet2 don't have receive payable function to allow receive ETH transfer.
Impact
Without the receive function not will be possible transfer ETH to smart contract wallet to pay fees, hold, transfer to others address etc.
Tools Used
Foundry and Solidity
Proof Of Concept
Add the following PoC to test/ModrianWallet2Test.t.sol:
function testZkContractCanReceiveETH() public {
(bool sent, bytes memory data) = address(mondrianWallet).call{value: 1 ether}("");
assertEq(sent, true);
}
Run: forge test --zksync --system-mode=true --match-test testZkContractCanReceiveETH -vvv
Recommendations
The smart contract wallet MondrianWallet2 should be have the receive payable function:
+ receive() external payable {}
// Needed for UUPS
function _authorizeUpgrade(address newImplementation) internal override {}
Rewards breakdown
nSLOC
105This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.