Core Contracts

Summary

In veRAACToken.solin transferFrom function Malicious user will give from address as user address and to address as own address. Using this malicious user will be able to steal money from other user.Using this malicious user will be able to steal money from other user.

Vulnerability Details

In veRAACToken.solin transferFrom function Malicious user will give from address as user address and to address as own address. Using this malicious user will be able to steal money from other user.

Impact

Users will lost his own money.

Tools Used

Manual review

Recommendations

In veRAACToken.solin transferFrom function use sender address equal to msg.sender