Submission Details
Severity:
Missing Beneficiary Validation in `inherit()`
Summary
When beneficiaries.length == 1, any address can call inherit() to become the new owner, regardless of beneficiary status.
Vulnerability Details
The inherit() function allows msg.sender to claim ownership if there’s one beneficiary, without verifying if the caller is the actual beneficiary.
Impact
An attacker can take full control of the contract after 90 days of inactivity, stealing all assets.
Tools Used
Manual review.
Recommendations
Add a check: require(msg.sender == beneficiaries[0], "Not beneficiary").
Updates
Lead Judging Commences
0xtimefliez 6 months ago
Submission Judgement Published Assigned finding tags:
Inherit depends on msg.sender so anyone can claim the contract
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.