search

code-423n4 / 2022-01-insure-findings

2 stars 0 forks source link

Pause check missing on the several functions (PoolTemplate) #339

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Handle

defsec

Vulnerability details

Impact

On the deposit and other functions, some of the functions are checked when the contract is paused. However, other functions like unlock or transferinsturance does not have any pause protection.

Proof of Concept

  1. Navigate to the following contract.

https://github.com/code-423n4/2022-01-insure/blob/19d1a7819fe7ce795e6d4814e7ddf8b8e1323df3/contracts/PoolTemplate.sol#L260

Tools Used

None

Recommended Mitigation Steps

Review all the function behaviours and put extra pause check.