Usage of contractInteractions can lead to funds loss.
Due to specifications of some functions in protocols, the original owner has to call the functions. Let's use Aave as an example: if the owner deposits the funds in Aave as collateral and gets some borrow, to repay the borrow and get back the funds, the original caller (in this case, InheritanceManager) should call the function to repay the debt. But as this function is capped to onlyOwner
, it will be impossible to call it.
Medium due to very specific likelihood, but still can have a big impact because of the loss of funds
Manual review
Create a new modifier like ownerOrBeneficiaryWithIsInherited
to combine both modifiers.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.