Submission Details
Severity:
malicious user can vote on behalf of other voter
Summary
in veRAACToken.sol in recordVote function Attacker can run front run attack and able to vote using other user address.
Vulnerability Details
in veRAACToken.sol in recordVote function Attacker can run front run attack and able to vote using other user address.
function recordVote(
address voter,
uint256 proposal Id
) external {
if (_hasVotedOnProposal[voter][proposalId]) revert AlreadyVoted();
_hasVotedOnProposal[voter][proposalId] = true;
uint256 power = getVotingPower(voter);
emit VoteCast(voter, proposalId, power);
}
Impact
User will lost their vote with wrong place with out voiting them.
Tools Used
manual review
Recommendations
in veRAACToken.sol in recordVote function should be voter == msg.sender.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
veRAACToken::recordVote lacks access control, allowing anyone to emit fake events
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
veRAACToken::recordVote lacks access control, allowing anyone to emit fake events
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.