You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
0xDemon - The superPool contract cannot be paused and unpaused completely when needed (i.e. superPool is hacked) because none of the functions in it use the whenNotPaused and whenPaused modifiers
#520
DuplicateA valid issue that is a duplicate of an issue with `Has Duplicates` labelMediumA Medium severity issue.RewardA payout will be made for this issue
The superPool contract cannot be paused and unpaused completely when needed (i.e. superPool is hacked) because none of the functions in it use the whenNotPaused and whenPaused modifiers
Summary
The superPool contract cannot be paused and unpaused completely when needed (i.e. superPool is hacked) because none of the functions in it use the whenNotPaused and whenPaused modifiers
Root Cause
superPool contract inherits from Pausable , but none of the functions in it use the whenNotPaused and whenPaused modifiers
Internal pre-conditions
No response
External pre-conditions
No response
Attack Path
No response
Impact
The superPool contract cannot be paused and unpaused completely
PoC
No response
Mitigation
Consider adding whenNotPaused and whenPaused modifiers to critical functions (i.e deposit, mint, withdraw, redeem, and reallocate)
sherlock-admin4
changed the title
Droll Mocha Goblin - The superPool contract cannot be paused and unpaused completely when needed (i.e. superPool is hacked) because none of the functions in it use the whenNotPaused and whenPaused modifiers
0xDemon - The superPool contract cannot be paused and unpaused completely when needed (i.e. superPool is hacked) because none of the functions in it use the whenNotPaused and whenPaused modifiers
Sep 15, 2024
DuplicateA valid issue that is a duplicate of an issue with `Has Duplicates` labelMediumA Medium severity issue.RewardA payout will be made for this issue
0xDemon
Medium
The
superPool
contract cannot bepaused
andunpaused
completely when needed (i.e.superPool
is hacked) because none of the functions in it use thewhenNotPaused
andwhenPaused
modifiersSummary
The
superPool
contract cannot bepaused
andunpaused
completely when needed (i.e.superPool
is hacked) because none of the functions in it use thewhenNotPaused
andwhenPaused
modifiersRoot Cause
superPool contract inherits from
Pausable
, but none of the functions in it use thewhenNotPaused
andwhenPaused
modifiersInternal pre-conditions
No response
External pre-conditions
No response
Attack Path
No response
Impact
The
superPool
contract cannot bepaused
andunpaused
completelyPoC
No response
Mitigation
Consider adding
whenNotPaused
andwhenPaused
modifiers to critical functions (i.edeposit
,mint
,withdraw
,redeem
, andreallocate
)Duplicate of #270
The text was updated successfully, but these errors were encountered: