Inheritable Smart Contract Wallet
First Flight #35
Beginner FriendlySolidity
100 EXP
View results
Previous Next
Submission Details
Severity: low
Invalid

Users may lose access to primary wallet and gets funds stucked before adding secondary wallet as beneficiary

0xlasadie

Summary

There is a window between contract creation and adding the user's secondary wallet as a beneficiary, where users may lose their keys to the primary wallet. Causing funds to be stuck inside the contract forever.

Vulnerability Details

The InheritanceManager contract does not enforce user to add backup secondary wallet as beneficiary.

Impact

If user loses keys to the primary wallet before adding secondary backup wallet as beneficiary. Which causes funds to be stuck in the contract forever.

Tools Used

Manual review

Recommendations

It is recommended to enforce adding secondary wallet address as beneficiary during contract creation in the constructor

+constructor(address backup) {
owner = msg.sender;
nft = new NFTFactory(address(this));
+ beneficiaries.push(_beneficiary);
}
Updates

Lead Judging Commences

0xtimefliez Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.