Open code423n4 opened 2 years ago
0x1f8b
owner can change the source without any warning.
The method Cvx3CrvOracle.setSource should emit an event in order to be able to detect this call by dapps.
Cvx3CrvOracle.setSource
Manual review
Emit an event
Agree with the finding, because events are informational in nature, am going to downgrade to non-critical
Handle
0x1f8b
Vulnerability details
Impact
owner can change the source without any warning.
Proof of Concept
The method
Cvx3CrvOracle.setSource
should emit an event in order to be able to detect this call by dapps.Tools Used
Manual review
Recommended Mitigation Steps
Emit an event