Closed sherlock-admin2 closed 7 months ago
Dobry
medium
redeemRewards
The function redeemRewards has no modifier and can be called by anyone.
The function redeemRewards has no modifier and can be called by anyone, which means that funds can get stolen
function redeemRewards(uint128 validatorId, address beneficiary, uint128 amount) external whenNotPaused {
Manual Review
Check if the user that is calling the function is the user that stands behind the passed validatorId
validatorId
1 comment(s) were left on this issue during the judging contest.
takarez commented:
invalid
Invalid, similar reasonings to #90
Dobry
medium
Anyone can call
redeemRewards
and redeem rewardsSummary
The function
redeemRewards
has no modifier and can be called by anyone.Vulnerability Detail
The function
redeemRewards
has no modifier and can be called by anyone, which means that funds can get stolenImpact
The function
redeemRewards
has no modifier and can be called by anyone.Code Snippet
Tool used
Manual Review
Recommendation
Check if the user that is calling the function is the user that stands behind the passed
validatorId