Skip to content

🐛 [BUG] - Remove auto-subscription of delegate in addDelegate #439

@0xNilesh

Description

@0xNilesh

Expected Behaviour

addDelegate auto-subscribes the delegate address to the channel owner, but don't unsubscribe it in removeDelegate
Due to this, any malicious channel can gain subs by just adding delegate and then calling removeDelegate to remove their authority

Current Behaviour

addDelegate auto-subscribe the delegate address to the caller

Reproduction steps

.

Screenshots

![DESCRIPTION](LINK.png)

POC if available

No response

Contract Name

Comm Contract

Chains

No response

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingpriority-2Medium priority

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions