Users using account abstraction wallets will tend to lose their TGLD while transferring it as it stricts to use same address on diff chain.
Summary
Users with account abstraction wallets have different addresses across different chains, so for such user who tries to transfer their TGLD to another chain, the TGLD will be minted to the wrong address and lost permanently.
Vulnerability Details
As there will be a lot of users which are using AA based wallets, as Account Abstraction is the key to onboard new users to the DeFi realm, but during transferring of their TGLD token to another chain they will suffer as the tokens will be minted on the same address but the same address on other chain will not necessarily belong to them thus losing their tokens.
Impact
Users using account abstraction wallets will tend to lose their TGLD while transferring it to another chain.
Tools Used
N/A
Recommendations
Also, as the protocol wants to make the TGLD non-tradeable, but it is also mandatory to ensure that Account Abstraction based users should also be allowed to participate, so the protocol should implement a mechanism in which they take the addresses of the AA wallet of the users on various diff chains and allow them to bridge to only that particular address of that chain.
Lead Judging Commences
Account abstraction, Multisig, Any other contract based solution that doesn't share the same address across chains will lose it's TGLD in teleport.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.