Submitted by csanuragjain, also found by cccz and GimelSec
ETHRegistrarController.sol#L201
NameWrapper.sol#L271
The ETHRegistrarController is calling renew from base registrar and not through Namewrapper. This means the fuses for the subdomain will not be updated via _setData. This impacts the permission model set over subdomain and could lead to takeover
The ETHRegistrarController must renew using Namewrappers renew contract.
Arachnid (ENS) commented:
LSDan (judge) commented:
