Submission Details
Severity:
Lack of Access Control for Critical Functions
Summary: Several critical functions lack proper access control mechanisms, potentially allowing unauthorized access or modifications.
Root Cause: Functions like _registerCollateralToken, _createContingentPool, and _addLiquidity don't have explicit access controls beyond the base Ownable2Step contract.
Impact: Unauthorized actors could manipulate the system by calling these functions.
Mitigation: Implement role-based access control or restrict these functions to only allow calls from specific addresses or roles.
function _registerCollateralToken(address _collateralToken) internal returns (address) {
require(msg.sender == owner(), "Only the contract owner can register collateral tokens");
// ... rest of the function ...
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929 USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.