mediumAccess controlEVM-Solidity
Decent: Missing access control on UTB:receiveFromBridge allows UTB swaps to be executed without spending bridge fees while bypassing fee/swap instruction signature verification
- Payout
- $0
- Protocol
- Decent
- Disclosed
- Mar 22, 2024
- Source
- code4rena
The Decent UTB contract exposes a public receiveFromBridge function that lacks the retrieveAndCollectFees modifier applied to the other public entry points (swapAndExecute and bridgeAndExecute). Because receiveFromBridge directly invokes the internal _swapAndE …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-01-decent-findings/issues/590
- https://github.com/code-423n4/2024-01-decent-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.