Closed c4-submissions closed 10 months ago
GalloDaSballo marked the issue as duplicate of #359
GalloDaSballo changed the severity to QA (Quality Assurance)
This previously downgraded issue has been upgraded by GalloDaSballo
GalloDaSballo changed the severity to QA (Quality Assurance)
GalloDaSballo marked the issue as grade-c
Lines of code
https://github.com/delegatexyz/delegate-registry/blob/6d1254de793ccc40134f9bec0b7cb3d9c3632bc1/src/DelegateRegistry.sol#L154
Vulnerability details
Impact
Protocol's owner will losing all the tipping because function
sweep()
will send all the native token of theDelegateRegistry
contract to address(0)Proof of Concept
Code of function
sweep()
:Tools Used
Manual Review
Recommended Mitigation Steps
Send it to the owner address
Assessed type
Other