mediumLogic errorEVM-Solidity
Elfi: Call of ````revokeAllRole()```` would fail silently
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's RoleAccessControl library stores each account's roles in an EnumerableSet.Bytes32Set, but revokeAllRole() clears it with Solidity's delete keyword, which does not actually remove the set's backing entries. The call therefore returns successfully while l …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.