Submission Details
Impact:
Likelihood:
proposeTransaction not matching requirements
Author Revealed upon completion
Root + Impact
Description
-
Based on the spec : Signers can 'Propose new transactions (permission is tied to the role, so any signer can propose)'
-
on proposeTransaction function, there is an onlyOwner validation, which violates the spec
Risk
Likelihood: High
considering there should be 5 user who can proposeTransaction, the chance of this occured is 4 out of 5 (80%)
Impact: low
no direct issue to the fund
Recommended Mitigation
function proposeTransaction(address to, uint256 value, bytes calldata data)
external
nonReentrant
noneZeroAddress(to)
onlyOwner - remove this code
onlyRole(SIGNING_ROLE) + add this code
returns (uint256)
{
return _proposeTransaction(to, value, data);
}
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.