Hawk High

Summary

• The function LevelOne::graduateAndUpgrade is owners by onlyPrincipal, who is not a trusted owners , that mean the onlyPrincipal can exploit this function to steal the payPerTeacher!

Vulnerability Details

• Trusted owners could intentionally act against the interests of users — e.g., pausing the contract, upgrading it to malicious code, or seizing teachers funds & all the fees...

Impact

• The owner onlyPrincipal can upgraded the contract & add function to steal all the fees .

Tools Used

Foundry

Recommendations

• Use decentralized oracles (e.g., Chainlink, UMA).