Lines of code

Vulnerability details

Impact

SpigotLib._claimRevenue is marked public instead of internal. This public function is wrapped in the external claimRevenue function. Attacker can call _claimRevenue to claim Revenue Tokens into the Spigot escrow for later withradrawal.

Tools Used

Manual review

Recommended Mitigation Steps

Change function visibility to internal

The text was updated successfully, but these errors were encountered:

All reactions