Bug
The Vault struct can be deserialized into a TipPool struct and only the owner of the accounts gets checked in the withdraw function.
How can you exploit this?
Press ← or → to navigate between chapters
Press S or / to search in the book
Press ? to show this help
Press Esc to hide this help
The Vault struct can be deserialized into a TipPool struct and only the owner of the accounts gets checked in the withdraw function.
How can you exploit this?