Submission Details
Severity:
Missing Access Control in KeeperProxy.sol
Summary
The KeeperProxy.sol contract lacks proper access control for certain functions, allowing unauthorized users to execute critical operations
Vulnerability Details
The cancelFlow function does not have an onlyKeeper modifier, allowing anyone to cancel ongoing flows
function cancelFlow() external {
// Cancel flow logic
}
Impact
An attacker could disrupt the protocol by canceling ongoing flows, leading to loss of funds or failed trades
Tools Used
Manual code review
Recommendations
Add the onlyKeeper modifier to the cancelFlow function
function cancelFlow() external onlyKeeper {
// Cancel flow logic
}
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
1,91026 USDC / LOC
47,500
2,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.