Submission Details
Severity:
Anyone can mint index tokens
Summary
Anyone can call mint on out IndexToken
Vulnerability Details
Anyone can call mint on out IndexToken as it lacks a modifier
function mint(address to, uint256 amount) external {
if (to == address(0)) revert InvalidAddress();
_mint(to, amount);
}
Impact
This token can be used in multiple contracts. For example if used as staking token insage one of the gauged it would allow users to minth themselvs as many staking tokens as they want.
Using this token is dangerous as anyone can mint as much as they want.
Tools Used
Manual review
Recommendations
Add a modifier allowing only the owner/minter to mint.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.