Submission Details
Impact:
Likelihood:
proposeTransaction not matching requirements
Root + Impact
Description
-
Based on the spec : Signers can 'Propose new transactions (permission is tied to the role, so any signer can propose)'
-
on proposeTransaction function, there is an onlyOwner validation, which violates the spec
Risk
Likelihood: High
considering there should be 5 user who can proposeTransaction, the chance of this occured is 4 out of 5 (80%)
Impact: low
no direct issue to the fund
Recommended Mitigation
function proposeTransaction(address to, uint256 value, bytes calldata data)
external
nonReentrant
noneZeroAddress(to)
onlyOwner - remove this code
onlyRole(SIGNING_ROLE) + add this code
returns (uint256)
{
return _proposeTransaction(to, value, data);
}
Updates
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.