The enableBridge
function, which toggles the _enabled
state, can be called by the contract owner at any time without checks. If the bridge is disabled, all deposits and withdrawals will be blocked.
Potential denial of service if the bridge is disabled inadvertently or maliciously.
Consider adding checks or restrictions around when and how the bridge can be disabled, perhaps requiring a time delay or multi-signature approval.
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.