Submission Details
Severity:
Lack of Access Control in FeeCollector.sol
Author Revealed upon completion
Vulnerability Details
The collectFees() function in FeeCollector.sol lacks proper access control, allowing any user to call it and potentially disrupt fee collection processes.
Impact
Unauthorized users could interfere with fee collection, leading to loss of funds or denial of service.
Recommendations
Implement Access Control
Restrict access to the collectFees() function to authorized roles using OpenZeppelin's AccessControl or Ownable contracts.
import "@openzeppelin/contracts/access/Ownable.sol";
contract FeeCollector is Ownable {
function collectFees(address token) external onlyOwner {
// Fee collection logic
}
}
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
View preliminary resultsAppeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.