3Dpass / 3DP

The Implementation of The Ledger of Things Node. Layer 1 decentralized blockchain platform for the tokenization of objects. Proof of Scan protocol. Useful smart-contracts and dApps.
https://3dpass.org/
GNU General Public License v3.0
23 stars 17 forks source link

Wrong address checked for kyc when joining a pool #73

Closed TacogentP3D closed 9 months ago

TacogentP3D commented 10 months ago

https://github.com/3Dpass/3DP/blob/110c140a97ac8e726889ff21127adad8f907d0f6/pallets/mining-pool/src/lib.rs#L600-L606 check_identity is called with the pool's addresses instead of the member's address, allowing anyone to join kyc pools for some time until they are removed by sync_identity