code-423n4 / 2023-08-pooltogether-mitigation-findings

0 stars 0 forks source link

M-06 MitigationConfirmed #46

Open code423n4 opened 1 year ago

code423n4 commented 1 year ago

Lines of code

Vulnerability details

Issue mitigated

About the problem

Attacker can frontrun deployers with setDrawManager call in order to set wrong draw manager address. I believe that this is not issue at all. Because in case of frontrunning contract can simply be redeployed.

Solution

This issues is fixed. Deployer address is set on construction and is checked in the setDrawManager function.

c4-judge commented 1 year ago

Picodes marked the issue as satisfactory

c4-judge commented 1 year ago

Picodes marked the issue as confirmed for report