Skip to content
This repository was archived by the owner on Dec 31, 2024. It is now read-only.

Conversation

@whitj00
Copy link

@whitj00 whitj00 commented May 26, 2015

Add Omni/Mastercoin asset implementation

@jorisbontje
Copy link
Contributor

This example has a few obvious security flaws:

  1. by using the same namespace for storing the account balances as the issuer address.
  2. using an integer overflow on value you can steal value from someone else' account using send.
  3. revoke is probably lacking a check if the caller is the issuer. (also it takes formvalue from the provided acct, but then deducts it from msg.sender account.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants