Submission Details
Severity:
Missing Access Control in `AssetSwapPath::configure`
Vulnerability Details
The function does not include any access control checks. If this function is called by an unauthorized party, it could lead to malicious or unintended configuration changes.
function configure(
Data storage self,
bool enabled,
address[] memory assets,
uint128[] memory dexSwapStrategyIds
)
internal
{
self.enabled = enabled;
self.assets = assets;
self.dexSwapStrategyIds = dexSwapStrategyIds;
}
Recommendations
Add access control to ensure only authorized parties can call this function.
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821 USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.