mediumAccess controlSolana-Rust
WOOFi Swap on Solana: Missing permission control in create_oracle and create_pool.
- Payout
- $0
- Protocol
- WOOFi Swap on Solana
- Disclosed
- Sep 24, 2024
- Source
- sherlock
WOOFi's Solana Anchor program shipped create_wooracle and create_pool instructions that did not restrict the calling signer to the WooConfig authority, contradicting the README's promise that these were admin-only functions. Because create_pool links its new p …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.