sechub
HomeServicesAssetsJobsFindingsTicketsGovCheck
Guest Mode. Click here to sign in and access all features

    Pyth entropy and random provider contracts cannot be changed

    Blast the balloon SC Audit

    Severity
    Low
    Status
    Fixed
    Location(s)

    BTB.sol

    Description

    The BTB contract at initialization sets the values of the pyth entropy and provider contracts. These generate the random used in the finalization of the spin execution. There is no setter for changing these values. For now, they are singular per chain, but any extreme circumstance that would require these to be discarded would leave the BTB contract in a bad situation.

    Recommendation

    Add a setter for the entropy and provider contracts. Also emit an event when changing them.

    Comments
    No comments yet

    Pyth entropy and random provider contracts cannot be changed

    Blast the balloon SC Audit

    Severity
    Low
    Status
    Fixed