You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Suppose the _human is also registerred in HubV1 contract, but not stopped, in such case, in mintTime.mintV1Status in Hub.sol#L981 will be address of the Circles contract(not CIRCLES_STOPPED_V1).
After some time, _human calls HubV1.stop to stop the Circle contract for HubV1
Attack Scenario
As described above, if _human doesn't call HubV1.stop to stop the Circle contract for HubV1 in step3, he will get Circle between timestamp T1 and T0.
But if he calls HubV1.stop, he won't get any Circle
The text was updated successfully, but these errors were encountered:
Github username: --
Twitter username: --
Submission hash (on-chain): 0x0bf0da4bc3b2d481be3ca1f4f021cf4e4c1baeb1f9af6d2e2c912c981c7fc7e6
Severity: medium
Description:
Description\
_human
is also registerred in HubV1 contract, but not stopped, in such case, inmintTime.mintV1Status
in Hub.sol#L981 will be address of the Circles contract(not CIRCLES_STOPPED_V1)._human
callsHubV1.stop
to stop the Circle contract for HubV1Hub.personalMint
orHub.calculateIssuanceWithCheck
, in Hub.sol#L1068, because themintTimes[_human].mintV1Status
is notCIRCLES_STOPPED_V1
, _updateMintV1Status will be called,Attack Scenario
As described above, if
_human
doesn't callHubV1.stop
to stop the Circle contract for HubV1 in step3, he will get Circle between timestamp T1 and T0.But if he calls
HubV1.stop
, he won't get any CircleThe text was updated successfully, but these errors were encountered: