Submission Details
Severity:
Reentrancy Risk in executeTransaction()
Summary
vulnerable to reentrancy attacks
Vulnerability Details
(bool success, ) = txn.to.call{value: txn.value}("");
Impact
This is vulnerable to reentrancy attacks if the recipient is a contract that calls back into MultiSigWallet before txn.executed is set to true.
Tools Used
Recommendations
Move txn.executed = true; before the external call.
Updates
Appeal created
n0kto 6 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
invalid_reentrancy_with_no_impact
matchRewards: Contract is created just before and is the one called. No impact. executeTransaction: CEI is followed. Emitting an event in disorder is informational in that context. withdraw: CEI is followed.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.