Inheritable Smart Contract Wallet
First Flight #35
Beginner FriendlySolidity
100 EXP
View results
Previous Next
Submission Details
Severity: high
Invalid

Missing Check for Beneficiaries Having Received Funds After Deadline in buyOutEstateNFT()

0xshaedyw

Summary

The buyOutEstateNFT function does not check whether beneficiaries have received their funds after the deadline, allowing buyouts to occur prematurely.

Vulnerability Details

  • The function uses the onlyBeneficiaryWithIsInherited modifier, but this does not enforce the requirement that beneficiaries must have received their funds after the deadline.

  • This could allow beneficiaries to buy out the estate NFT before they have received their fair share of the funds.

Impact

  • Premature Buyouts: Beneficiaries could buy out the estate NFT before receiving their funds, violating the intended workflow.

  • Security Risk: The buyout process could be exploited to bypass the fund distribution logic.

Tools Used

Manual review

Recommendations

Add a check to ensure beneficiaries have received their funds after the deadline:

require(block.timestamp >= deadline, "Deadline not yet passed");
Updates

Lead Judging Commences

0xtimefliez Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.