You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[L-02] Fee in Cally.setFee() should be upper-bounded
A malicious owner or owner account compromise can set the fee very high, up to 100%, siphoning all profits from the protocol.
Consider implementing a reasonable upper limit here:
The text was updated successfully, but these errors were encountered:
HardlyDifficult
added
bug
Something isn't working
duplicate
This issue or pull request already exists
2 (Med Risk)
Assets not at direct risk, but function/availability of the protocol could be impacted or leak value
labels
May 24, 2022
JeeberC4
added
invalid
This doesn't seem right
and removed
bug
Something isn't working
duplicate
This issue or pull request already exists
2 (Med Risk)
Assets not at direct risk, but function/availability of the protocol could be impacted or leak value
labels
Jun 6, 2022
From BowTiedWardens in #190
[L-02] Fee in Cally.setFee() should be upper-bounded
A malicious owner or owner account compromise can set the fee very high, up to 100%, siphoning all profits from the protocol.
Consider implementing a reasonable upper limit here:
File: Cally.sol
119: function setFee(uint256 feeRate_) external onlyOwner {
120: feeRate = feeRate_;
121: }
The text was updated successfully, but these errors were encountered: