Submitted by rfa
In the claimConverted() function, the user can vest their vader token for a certain amount of time, but hasStarted modifier is missing,
this can lead to claimConverted() function is callable by anyone, and the user can claim eventhough the vesting havent been started by the owner.
https://github.com/code-423n4/2021-11-vader/blob/main/contracts/tokens/vesting/LinearVesting.sol#L158
add hasStarted modifier
SamSteinGG (Vader) commented:
alcueca (judge) commented:
SamSteinGG (Vader) commented:
