Biconomy: Nexus
Biconomy
Submission Details
Severity: low
InvalidLack of access control allows anyone to become a smart account validator owner
Updates
Lead Judging Commences
Submission Judgement Published
Invalidated
Reason: Known issue
Assigned finding tags:
finding-K1Validator-access-control-issues
- Transfer of ownerships/uninstallation/installation of modules is gated to the caller, wherein the new owner can only adjust the `smartAccountOwners` storing the current owner based on caller (`msg.sender`) that called the `transferOwnership()` function. This functionalities should - Known issue > A Nexus Smart Account could be locked forever if the owner installs a validator in the wrong way and does remove all other valid validators
Prize pool breakdown
Total prize
30,000 USDC
nSLOC
1,43321 USDC / LOC
High Medium
25,000 USDC
Low
2,750 USDC
Judges
2,250 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.