GivingThanks

Summary

The absence of access control allows unauthorized users to change the registry, potentially redirecting funds to malicious addresses and undermining the entire donation process.

Vulnerability Details

The updateRegistry function can be called by anyone, not just the contract owner. This allows malicious actors to redirect the registry to an unverified or malicious contract.

Impact

Without access control, unauthorized users can compromise the integrity of the charity verification process.

Tools Used

Manual Review

Recommendations

This can be applied by adding Ownable library

Then apply the modifier in the function