Improper Access Control
| Property | |
|---|---|
| Language | solidity |
| Severity | |
| CWE | CWE-284: Improper Access Control |
| Confidence Level | Low |
| Impact Level | High |
| Likelihood Level | High |
Description#
A function in your smart contract allows anyone to call selfdestruct, which can permanently delete the contract and send its funds to an arbitrary address. This function lacks access control, so unauthorized users can trigger it.
Impact#
If exploited, any user could destroy the contract, making all its code and data inaccessible and irreversibly transferring any remaining funds. This could result in total loss of assets and functionality for users and stakeholders.