search

code-423n4 / 2024-08-wildcat-findings

3 stars 1 forks source link

Upgraded Q -> 2 from #17 [1728912210729] #123

Closed c4-judge closed 1 month ago

c4-judge commented 1 month ago

Judge has assessed an item in Issue #17 as 2 risk. The relevant finding follows:

[L-01] AccessControlHooks::onQueueWithdrawal missing validation

c4-judge commented 1 month ago

3docSec marked the issue as duplicate of #11

c4-judge commented 1 month ago

3docSec marked the issue as satisfactory

3docSec commented 1 month ago

In some cases this would allow a malicious user to unset a victim’s credentials via _tryValidateAccess()

☝️ this is the passage that gets this upgrade full credit