ElasticReceiptTokenBase_v1.increaseAllowance
lacks of validRecipient
modifier
#140
Labels
ElasticReceiptTokenBase_v1.increaseAllowance
lacks of validRecipient
modifier
#140
Github username: --
Twitter username: --
Submission hash (on-chain): 0xdfafe3bb77118d9c96ff1b19049bed1aafc6c4b1c63c2e825604c7c73860a909
Severity: low
Description:
Description
ElasticReceiptTokenBase_v1.increaseAllowance and ElasticReceiptTokenBase_v1.approve have sililar function that add/set
_tokenAllowances
.For
ElasticReceiptTokenBase_v1.approve
, the function uses validRecipient, butincreaseAllowance
doesn't usevalidRecipient
.Attack Scenario
Without the
validRecipient
,ElasticReceiptTokenBase_v1.increaseAllowance
can be used to set_tokenAllowances
to address(0) oraddress(this)
Attachments
The text was updated successfully, but these errors were encountered: