Submission Details
Severity:
Reduce user kittyCoinMeownted amount by calling burnKittyCoin
Summary
Anyone can call the burnKittyCoin function to reduce the user's kittyCoinMeownted amount on their behalf.
Vulnerability Details
Anyone can call the burnKittyCoin function to reduce the user's kittyCoinMeownted amount on their behalf.
Impact
Reduce user kittyCoinMeownted amount without their approval
Tools Used
Manual
Recommendations
Ensure the burn function only can control the msg.sender amount
Rewards breakdown
nSLOC
224This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.