60,000 USDC
Submission Details
Severity:
isWhitelisted function in bridge.sol returns true for all collections if globally
Code Links
Summary
the _isWhitelisted() function is meant to check if a collection is whitelisted or not and return true or false
Vulnerability Details
The whiteListEnabled variable is used to indicate whether the whitelisting is enabled globally or not, when it is set to false it means the whitelisting is disabled globally. Hiwever when it is disabled the _isWhitelisted returns true
Impact
The function returns true, even if the collection is not whitelisted when the _whiteListEnabled variable is false. This allows even non whitelisted collections
Tools Used
Manual Review
Recommendations
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.