Platform: Code4rena
Start Date: 16/11/2021
Pot Size: $30,000 USDC
Total HM: 3
Participants: 18
Period: 3 days
Judge: leastwood
Total Solo HM: 2
Id: 56
League: ETH
Rank: 10/18
Findings: 1
Award: $338.18
🌟 Selected for report: 1
🚀 Solo Findings: 0
🌟 Selected for report: pmerkleplant
Also found by: pauliax
338.1819 USDC - $338.18
pmerkleplant
The functions AlToken::setBlacklist and AlToken::pauseAlchemist in v3/alchemix
state in their docs: "This function reverts, if the caller does not have the admin role".
However, the functions revert if the caller does not have the sentinel role.
See lines 93-98.
#0 - Xuefeng-Zhu
2021-11-23T08:22:06Z
should be 0 risk
#1 - 0xleastwood
2021-12-21T03:54:30Z
According to judge's docs, incorrect comments matching spec should be marked as low.
1 — Low (L): vulns that have a risk of 1 are considered “Low” severity when assets are not at risk. Includes state handling, function incorrect as to spec, and issues with comments.
Will keep this issue as is.