Lucene search
+L

2 matches found

Code423n4
Code423n4
added 2021/11/10 12:00 a.m.10 views

InvestorDistribution uses setAdmin anti-pattern

Handle elprofesor Vulnerability details Impact InvestorDistriubtion.sol uses a setAdmin function which directly sets privileged user accounts to a set value. If this function is used incorrectly or by accident, the admin user may be lost or set to a malicious account. Recommended Mitigation Steps...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2021/11/09 12:00 a.m.12 views

setAdmin function use one-phase owner transfership instead of two-phases safer ownership transfer

Handle mics Vulnerability details one-phase ownership transfer sometimes used wrong and the ownership is transferred to a not existing account. The safe way to use it is to suggest new owner and then the new owner should claim its ownership. InvestorDistribution line 212 --- The text was updated...

6.9AI score
SaveExploits0
Rows per page
Query Builder