Submission Details
Severity:
Unrestricted Fee Withdrawal in the `LikeRegistry::withdrawFees()` function
Description: Owner can withdraw fees without comprehensive restrictions in the withdrawFees() function
Impact: Potential unauthorized fund extraction
Proof of Concept:
function withdrawAllFees() external onlyOwner {
// Drain accumulated fees without additional checks
withdrawFees();
}
Recommended Mitigation:
Implement tiered withdrawal limits
Add time-based restrictions
Create multi-signature withdrawal mechanism
Updates
Appeal created
n0kto 6 months ago
Submission Judgement Published Reason: Incorrect statement
Assigned finding tags:
Admin is trusted
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.