Submission Details
Severity:
executeTransaction() should allow calls from bootloader only
Summary
Vulnerability Details
The executeTransaction() can be called by the owner, and it does not validate the transaction sent by the owner. An attacker can trick the user in sending
invalid transaction which will be executed without checking.
Impact
Attacker can execute any transaction on the wallet taking full control.
Tools Used
Manual review
Recommendations
Replace the requireFromBootLoaderOrOwner modifier with requireFromBootLoader on executeTransaction
function executeTransaction(bytes32, /*_txHash*/ bytes32, /*_suggestedSignedHash*/ Transaction memory _transaction)
external
payable
requireFromBootLoader
{
_executeTransaction(_transaction);
}
Rewards breakdown
nSLOC
105This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.