DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: high
Invalid

Lack of Access Control on distributePoints Function for FjordPoints contract

Line: https://github.com/Cyfrin/2024-08-fjord/blob/6614c7f97f6fb020f1a980215e7579615027ba8e/src/FjordPoints.sol#L232

The distributePoints function can be called by anyone at any time, which may lead to unexpected or unnecessary state changes.

  • Risk: This can allow a malicious user to call distributePoints at an inopportune moment, potentially causing undesired point distribution and impacting the fairness of the rewards.

  • Solution: Implement access control to restrict who can call the distributePoints function, or ensure that it can only be called under specific conditions.

Updates

Lead Judging Commences

inallhonesty Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.