Picodes / 4naly3er

Static smart contract code 4naly3er
https://github.com/Picodes/4naly3er
GNU General Public License v3.0
511 stars 138 forks source link

add centralization risk findings #5

Closed zaskoh closed 1 year ago

zaskoh commented 1 year ago

aviggiano suggested to Including "Centralization risk" as part of c4udit.

Thread: https://discord.com/channels/810916927919620096/1054022325563052073

This PR will create an automated medium-risk finding with:

Title: Centralization Risk for trusted owners Impact: Contracts have owners with privileged rights to perform admin tasks and need to be trusted to not perform malicious updates or drain funds.

It will search for functions with the modifier onlyOwner, onlyRole or requiresAuth. Contracts extensions from solmate and openzeppelin with Ownable, Ownable2Step, AccessControl, AccessControlCrossChain, AccessControlEnumerable, Owned, RolesAuthority, MultiRolesAuthority, Auth will also be marked in the findings.