Inheritable Smart Contract Wallet

Summary

The interactions with the protocol using the following functions do not call _setDeadline():

• contractInteractions

• createEstateNFT

• removeBeneficiary

This may lead to unexpected behaviors due to missing deadline updates.

Vulnerability Details

According to the protocol specifications, we can clearly assume that all protocol interactions should update the deadline. However, the mentioned functions do not do that.
In fact, only the addBeneficiary, sendERC20, and sendETH functions are performing this update.
This could allow inheritance funds to be claimed before the deadline.

Tools Used

Manual review

Recommendations

Add the _setDeadline(); call to the mentioned functions and consider changing _setDeadline(); to external onlyOwner to allow the owner to update the deadline without requiring an actual interaction.