Submission Details
Severity:
Anyone can become owner to after deadline is passed with only 1 benefitancy.
Summary
Anyone can become a new owner if the manager only has 1 benefitancy and deadline has passed.
Vulnerability Details
The contract does not check if msg.sender is in the benefitancies so anyone could become a new owner after deadline is passed.
Impact
High, anyone can steal all assets in the InheritanceManager
Tools Used
Foundry
Recommendations
Change the following line
--if (beneficiaries.length == 1) {
++if (beneficiaries.length == 1 && msg.sender == benficiaries[0]) {
With the test to check for frontrun
function test_frontrunOwner() public {
vm.warp(1);
vm.prank(owner);
im.addBeneficiery(user1);
address evil = makeAddr("evil");
vm.warp(1 + 90 days);
vm.prank(evil);
vm.expectRevert();
im.inherit();
}
Updates
Lead Judging Commences
0xtimefliez 6 months ago
Submission Judgement Published Assigned finding tags:
Inherit depends on msg.sender so anyone can claim the contract
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.