Require improvement in pre dyFinance_exp.sol

[AlexMercer00]

Hi, @owner

I wanted to bring to your attention some issues that were identified in the PredyFinance_exp.sol contract file . These issues pose potential security risks and could lead to vulnerabilities if left unaddressed.

   Issue: Unauthorized access to critical functions.

• Solution: Implement onlyOwner or similar access control modifiers.

  Isue: Unauthorized withdrawals of assets.
  

• Solution: Introduce authorization checks in withdrawal functions.

  Issue:  Bypassing safety checks in `take` and `supply` functions.
  

• Solution: Enhance validation and access control in asset management functions.

  Issue: Lack of validation in `predyTradeAfterCallback`.
  

• Solution: Add necessary checks and restrict access to callback functions.

   Issue: Use of insecure and hardcoded price data.
  

• Solution: Use reliable oracle-based price feeds.

It's essential to address these issues promptly to ensure the security and integrity of the PredyFinance contract.
Thank you for your attention to this matter, and I look forward to working together to improve the security of the PredyFinance contract.

[SaulRojas1505]

Issue: Unauthorized access to critical functions.

[SaulRojas1505]

/

Hi, @owner

I wanted to bring to your attention some issues that were identified in the PredyFinance_exp.sol contract file . These issues pose potential security risks and could lead to vulnerabilities if left unaddressed.

   Issue: Unauthorized access to critical functions.

• Solution: Implement onlyOwner or similar access control modifiers.

  Isue: Unauthorized withdrawals of assets.
  

• Solution: Introduce authorization checks in withdrawal functions.

  Issue:  Bypassing safety checks in `take` and `supply` functions.
  

• Solution: Enhance validation and access control in asset management functions.

  Issue: Lack of validation in `predyTradeAfterCallback`.
  

• Solution: Add necessary checks and restrict access to callback functions.

   Issue: Use of insecure and hardcoded price data.
  

• Solution: Use reliable oracle-based price feeds.

It's essential to address these issues promptly to ensure the security and integrity of the PredyFinance contract. Thank you for your attention to this matter, and I look forward to working together to improve the security of the PredyFinance contract.

[mohitsaini0660]

Is this issue is still open! I would like to contribute to this issue

[Elyx0]

needs closing, useless