Inheritable Smart Contract Wallet
First Flight #35
Beginner FriendlySolidity
100 EXP
View results
Previous Next
Submission Details
Severity: medium
Invalid

Unrestricted Trustee Appointment Enabling Asset Price Manipulation

ekene

Summary:
Any beneficiary can appoint a trustee, which may allow them to assign a favorable trustee and manipulate the asset price for a potential buyout.

Vulnerability Details:
The InheritanceManager::appointTrustee function does not restrict who can be appointed as trustee. This allows a beneficiary to potentially reduce the asset’s price to an almost negligible amount and then execute a buyout.

Test Example
function test__any_delegate_can_assign_trustee_to_change_asset_value() public inheritanceSetUp {
vm.startPrank(user1);
im.appointTrustee(user2);
vm.stopPrank();
vm.prank(user2);
im.setNftValue(1, 1e16);
​
assertEq(im.getNftValue(1), 1e16);
}

Impact:
Medium – This flaw can lead to asset mispricing and potential financial abuse.

Tools Used:
slither, aderyn, foundry

Recommendations:
Implement a consensus mechanism ensuring that a majority of beneficiaries approve any trustee assignment.

Updates

Lead Judging Commences

0xtimefliez Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!