learn-evm-attacks/test/Bridges/PolyNetworkBridge/polynetwork.d2 at master · coinspect/learn-evm-attacks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
PolyNetwork {

    setterTx: verifyHeaderAndExecuteTx(modifyPublicKeyParams)
    drainTx: verifyHeaderAndExecuteTx(drainParams)

  }

  Attacker -> PolyNetwork.setterTx: 1°
  Attacker -> PolyNetwork.drainTx: 2°

  explanation: |md
    # PolyNetwork
    - Access control leak
    - Public Key modified with whitelisted contract
  |