highAccess controlEVM-Solidity
Gondi: Function `distribute()` lacks access control allowing anyone to spam and disrupt the pool's accounting
- Payout
- $0
- Protocol
- Gondi
- Disclosed
- Jul 25, 2024
- Source
- code4rena
Gondi's LiquidationDistributor redistributes funds from settled liquidation auctions to lenders, and when a lender is a registered LoanManager it forwards the call to LoanManager.loanLiquidation() so the Pool re-books the funds to its depositors. The distribut …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-gondi-findings/issues/64
- https://github.com/code-423n4/2024-04-gondi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.