Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: high
Valid

`InheritanceManager:contractInteractions` should be onlyBeneficiaryWithIsInherited

Summary

Usage of contractInteractions can lead to funds loss.

Vulnerability Details

Due to specifications of some functions in protocols, the original owner has to call the functions. Let's use Aave as an example: if the owner deposits the funds in Aave as collateral and gets some borrow, to repay the borrow and get back the funds, the original caller (in this case, InheritanceManager) should call the function to repay the debt. But as this function is capped to onlyOwner, it will be impossible to call it.

Impact

Medium due to very specific likelihood, but still can have a big impact because of the loss of funds

Tools Used

Manual review

Recommendations

Create a new modifier like ownerOrBeneficiaryWithIsInherited to combine both modifiers.

Updates

Lead Judging Commences

0xtimefliez Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

impossible to unwind DeFi position from contractInteractions

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.