5 matches found
Unauthenticated Access of withdrawToTreasury Makes _distributeFees Not Work
Lines of code Vulnerability details Impact Since the function withdrawToTreasury lacks authority control, anyone can call withdrawToTreasury to transfer erc20 token or native coin held by the contract to the treasury. This will indirectly cause the transaction which calls function...