First Flight #21: KittyFi
First Flight #21
Beginner FriendlyDeFiFoundry
100 EXP
View results
Previous Next
Submission Details
Severity: high
Invalid

Missing Function to Update pool Address in KittyCoin.sol

heim

Summary

The contract currently lacks a mechanism to update the pool address, which can become an issue if the original address is compromised or needs to be rotated.

Vulnerability Details

Without the ability to update the pool address, the contract could become permanently affected if the address is compromised or lost. This rigidity poses significant long-term risks.

Impact

  • Severity: High

  • Losing control over the pool address can render the contract inoperable or expose it to unauthorized actions, causing severe disruptions and potential security breaches.

Tools Used

  • Manual code review

Recommendations

  • Introduce a function to securely update the pool address, incorporating proper authorization checks.

function updatePool(address _newPool) external onlyKittyPool {
require(_newPool != address(0), "New pool address cannot be zero address");
pool = _newPool;
}
Updates

Lead Judging Commences

shikhar229169 Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.