TempleGold
TempleDAO
Foundry
25,000 USDC
View results
Previous Next
Submission Details
Severity: high
Valid

users using the account abstraction wallet will not be able to cross-chain transfer

turvec

Summary

users using the account abstraction wallet will not be able to cross-chain transfer

Context:
TempleGold.sol#L286

Vulnerability Details

It is intended that the TempleGold.sol::send() function prevents users from sending to another address cross-chain aside themselves, which was implemented with the check:

if (msg.sender != _to) { revert ITempleGold.NonTransferrable(msg.sender, _to); }

However, this check prevents users using the account abstraction wallet from cross-chain transferring at all including to themselves. This is because users with account abstraction wallets have different addresses across different chains for the same account.

Impact

users using the account abstraction wallet will not be able to cross-chain transfer

Tools Used

Manual Review

Recommendations

Consider an implementation that adjusts for account abstraction users as well such as checking based on account not address

Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Account abstraction, Multisig, Any other contract based solution that doesn't share the same address across chains will lose it's TGLD in teleport.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.