DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: high
Invalid

Lack of Access Control on distributePoints Function for FjordPoints contract

Line: https://github.com/Cyfrin/2024-08-fjord/blob/6614c7f97f6fb020f1a980215e7579615027ba8e/src/FjordPoints.sol#L232

The distributePoints function can be called by anyone at any time, which may lead to unexpected or unnecessary state changes.

  • Risk: This can allow a malicious user to call distributePoints at an inopportune moment, potentially causing undesired point distribution and impacting the fairness of the rewards.

  • Solution: Implement access control to restrict who can call the distributePoints function, or ensure that it can only be called under specific conditions.

Updates

Lead Judging Commences

inallhonesty Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.