Code423n4 #40, anyone can call sponsor

RealityCards · Jun 15, 2021 · a234524 · a234524
1 parent 78b8eef
commit a234524
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/contracts/RCMarket.sol b/contracts/RCMarket.sol
@@ -825,6 +825,7 @@ contract RCMarket is Initializable, NativeMetaTransaction, IRCMarket {
         external
         override
     {
+        require(msgSender() == address(factory));
         _sponsor(_sponsorAddress, _amount);
     }