code-423n4 / 2022-01-openleverage-findings

0 stars 0 forks source link

function initialize can be call multipletime #256

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Handle

Fitraldys

Vulnerability details

Impact

in line https://github.com/code-423n4/2022-01-openleverage/blob/main/openleverage-contracts/contracts/XOLE.sol#L40 function initialize can be call multiple time because didnt have the check to make sure that this function can be called one time only

Proof of Concept

https://github.com/code-423n4/2022-01-openleverage/blob/main/openleverage-contracts/contracts/XOLE.sol#L40

Recommended Mitigation Steps

add initialize variable that check if this function already executed

ColaM12 commented 2 years ago

Duplicate to #67