146.md

Overt Vermilion Mallard

Medium

No functionality to update the registry address on BoostCore

Summary

No functionality to update the registry address on BoostCore

Root Cause

There is no functionality to update the registry address on BoostCore, breaking core contract functionality

https://github.com/sherlock-audit/2024-06-boost-aa-wallet/blob/main/boost-protocol/packages/evm/contracts/BoostCore.sol#L55-L56

    /// @notice The BoostRegistry contract
    BoostRegistry public registry;

Internal pre-conditions

n/a

External pre-conditions

n/a

Attack Path

n/a

Impact

Breaking core contract functionality

PoC

No response

Mitigation

No response