Submission Details
Severity:
Missing only beneficiarie calling check
Summary
The withdrawInheritedFunds function is designed to allow beneficiaries to withdraw inherited assets in equal portions. However, it is missing the onlyBeneficiaryWithIsInherited check.
Vulnerability Details
The function does not include a
onlyBeneficiaryWithIsInheritedmodifier, which might be necessary to ensure that only eligible beneficiaries can call this function.
Impact
Unauthorized users might attempt to withdraw inherited funds.
Tools Used
Manual code review
Recommendations
-Add a onlyBeneficiaryWithIsInherited modifier to restrict function access to eligible beneficiaries.
function withdrawInheritedFunds(address _asset) external nonReentrant
+ onlyBeneficiaryWithIsInherited
{
// Rest of code
}
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.