Lack Of Verification In Hashes
Submitted by (4) MEP, also found by byndooa, Haipls, and minhquanym
Last updated
Submitted by (4) MEP, also found by byndooa, Haipls, and minhquanym
Last updated
In Project.sol, function updateProjectHash
L162, _data
(which is signed by builder and/or contractor) does not contain a reference to the project address. In all other external functions of Project.sol, _data
contains the address of the project, used in this check:
require(_projectAddress == address(this), "Project::!projectAddress");
.