Submission Details
Severity:
Owner Can be changed by Anyone
TITLE: Any one can change Owner.
Description: If there is only one benificery, after the deadline, any one can call inheritance:: inherit(); function and become the owner.
Impact: Once the user becomes owner he can drain all the funds.
Proof of Concepts
function test_AnyOneCanInherit() public {
vm.startPrank(owner);
address _ownerBefore = im.getOwner();
console.log("Owner Before", _ownerBefore);
im.addBeneficiery(user1);
vm.warp(im.getDeadline() + 1 days);
vm.startPrank(user2);
im.inherit();
address _ownerAfter = im.getOwner();
console.log("Owner After", _ownerAfter);
vm.stopPrank();
}
Result: Owner Before 0x7c8999dC9a822c1f0Df42023113EDB4FDd543266 Owner After 0x537C8f3d3E18dF5517a58B3fB9D9143697996802
Recommended mitigation: Change Owner = msg.sender in the inherit() to owner = benificiery[0], And all the access modifier to the function.
Updates
Lead Judging Commences
0xtimefliez 10 months ago
Submission Judgement Published Assigned finding tags:
Inherit depends on msg.sender so anyone can claim the contract
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.