Submission Details
Severity:
The onlyBeneficiaryWithIsInherited modifier relies on array out-of-bounds reverts
Summary
The onlyBeneficiaryWithIsInherited modifier relies on array out-of-bounds reverts instead of explicit validation
Vulnerability Details
modifier onlyBeneficiaryWithIsInherited() {
uint256 i = 0;
while (i < beneficiaries.length + 1) { // Intentionally runs past array bounds
if (msg.sender == beneficiaries[i] && isInherited) {
break;
}
i++;
}
_;
}
Impact
Unclear error messaging when access is denied
Tools Used
manual review
Recommendations
Use explicit validation with error NotBeneficiary(msg.sender);
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.