highAccess controlEVM-Solidity
INIT Capital: MarginTradingHook#updateOrder lacks access control
- Payout
- $0
- Protocol
- INIT Capital
- Disclosed
- Feb 22, 2024
- Source
- code4rena
INIT Capital's MarginTradingHook exposes updateOrder, which lets any caller with an open margin position rewrite the trigger price, limit price, collateral amount, and output token of any other user's active order. The function checks that the target order is …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-01-init-capital-invitational-findings/issues/34
- https://github.com/code-423n4/2024-01-init-capital-invitational-findings
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.