Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: medium
Valid

[M-1] Invariant violation: Not all owner transactions reset 90-day timelock, prematurely making assets available

Description: The protocol documentation states the following invariant: EVERY transaction the owner does with this contract must reset the 90 days timer. The functions InheritanceManager::contractInteractions, InheritanceManager::createEstateNFT, and InheritanceManager::removeBeneficiaryare onlyOwner callable transactional functions, and they do not reset the timelock.

Impact: Assets in the contract will be prematurely made available for inheritance, breaking the protocol.

Recommended Mitigation: Add the call to InheritanceManager::_setDeadline in the functions InheritanceManager::contractInteractions, InheritanceManager::createEstateNFT, and InheritanceManager::removeBeneficiary. _setDeadline will reset the timelock to 90 days.

Updates

Lead Judging Commences

0xtimefliez Lead Judge 9 months ago
Submission Judgement Published
Validated
Assigned finding tags:

functions do not reset the deadline

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!