Submission Details
Severity:
Missing Access Control on `burnFrom` Allows Unauthorized Token Burning
Vulnerability Details
The burnFrom function is inherited from ERC20.sol but has not been overridden to include an access control mechanism. As a result, any user can call ERC20ToGenerateNftFraccion::burnFrom to burn any amount of ERC20ToGenerateNftFraccion tokens from any other user without authorization.
Impact
Unauthorized and unlimited token burning by any user.
Potential loss of user assets and disruption of protocol functionality.
Recommendations
Override the burnFrom function and implement an appropriate access control mechanism to restrict who can burn tokens.
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.