Submission Details
Severity:
`LLMOracleCoordinator` owner can withdraw all fees
Summary
LLMOracleCoordinator.sol::withdrawPlatformFees() transfers balance of address(this) to the owner, which allows the owner to withdraw all fees, include generation fee and validation fee.
/// @notice Withdraw the platform fees & along with remaining fees within the contract.
function withdrawPlatformFees() public onlyOwner {
feeToken.transfer(owner(), feeToken.balanceOf(address(this)));
}
Impact
Once user issues a oracle request and transfers fees to LLMOracleCoordinator, the owner can withdraw all fees before or during any generating and validating process. Generator and validator won't get the fees that they derseve. Theire is a crisis of trust.
Tools Used
Manual
Recommendations
add a variable to storage platform fee and remaining fees instead of using balanceOf(address(this)
Updates
Lead Judging Commences
inallhonesty 12 months ago
Submission Judgement Published Assigned finding tags:
`withdrawPlatformFees` withdraws the entire balance
Prize pool breakdown
Total prize
21,000 USDC
nSLOC
1,03420
USDC / LOC
20,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.