highAccess controlEVM-Solidity
Decent: Anyone can update the address of the Router in the DcntEth contract to any address they would like to set.
- Payout
- $0
- Protocol
- Decent
- Disclosed
- Mar 22, 2024
- Source
- code4rena
The DcntEth contract suffers from an unprotected administrative function that allows any user to modify the bridge's designated router address. Because subsequent mint and burn functions rely on this address to restrict access, an attacker can reconfigure the …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-01-decent-findings/issues/721
- https://github.com/code-423n4/2024-01-decent-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.