Submission Details
Severity:
No access control in mint
Summary
There is no access control for the mint function.
Vulnerability Details
https://github.com/Cyfrin/2024-11-one-world/blob/main/contracts/shared/testERC20.sol#L16
function mint(address account, uint256 amount) external {
_mint(account, amount);
}
Impact
we can mint any amount of token as there is no access control.
Tools Used
Recommendations
keep a access control.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
54128 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.