Skip to content

Latest commit

 

History

History
29 lines (15 loc) · 1.18 KB

040.md

File metadata and controls

29 lines (15 loc) · 1.18 KB

moneyversed

high

Market owner privileges

Summary

The setTrustedMarketForwarder function allows the market owner to change the trusted forwarder. An attacker who gains control of the market owner's address may change the trusted forwarder to a malicious contract, leading to potential loss of funds.

Vulnerability Detail

The setTrustedMarketForwarder function in the TellerV2Context.sol contract allows the market owner to change the trusted forwarder. If an attacker gains control of the market owner's address, they could change the trusted forwarder to a malicious contract, which could lead to potential loss of funds for users interacting with the platform.

Impact

Loss of funds and compromised platform integrity if an attacker gains control of the market owner's address and manipulates the trusted forwarder.

Code Snippet

https://github.com/sherlock-audit/2023-03-teller/blob/main/teller-protocol-v2/packages/contracts/contracts/TellerV2Context.sol#L70

Tool used

Manual Review

Recommendation

Implement additional access controls and security measures to ensure the market owner's address is secure, and limit the ability of an attacker to manipulate the trusted forwarder.