code-423n4 / 2023-08-pooltogether-mitigation-findings

0 stars 0 forks source link

M-06 MitigationConfirmed #46

Open code423n4 opened 11 months ago

code423n4 commented 11 months ago

Lines of code

Vulnerability details

Issue mitigated

About the problem

Attacker can frontrun deployers with setDrawManager call in order to set wrong draw manager address. I believe that this is not issue at all. Because in case of frontrunning contract can simply be redeployed.

Solution

This issues is fixed. Deployer address is set on construction and is checked in the setDrawManager function.

c4-judge commented 10 months ago

Picodes marked the issue as satisfactory

c4-judge commented 10 months ago

Picodes marked the issue as confirmed for report