Submitted by deadrxsezzz, also found by 0x1771 and gesha17
https://github.com/code-423n4/2024-08-wildcat/blob/main/src/access/FixedTermLoanHooks.sol#L413
If we look at the code comments, well see that role providers can update a users credential only if at least one of the 3 is true:
This means that a role provider should not be able to reduce a credential set by another role provider.
However, this could easily be bypassed by simply splitting the call into 2 separate ones:
Fix is non-trivial.
d1ll0n (Wildcat) disputed and commented:
3docSec (judge) commented:
