Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2021/11/11 12:0 a.m.8 views

Missing access restriction on Vesting.updateVestedTokens

Handle cmichel Vulnerability details The FSDVesting.updateVestedTokens function is supposed to be called by the FDS contract only which also mints tokens to the contract. However, it does not have any access restrictions which leads to circumventing the vesting and further griefing attacks. POC...

7AI score
SaveExploits0
Rows per page
Query Builder