Bug report template
Bug name
can use advance login to login to any BOID account
Summary
When searching for a BOID ID and loading the account you can use Anchor and Telos account to login to the account.
How to exploit
Search for a valid BOID ID, used advance login and login with Anchor account even if you are not the owner
Exploitation results
Once you are logged in with a Telos account you can try to update account information but it does not update (good) I have not tried to add an owner while logged in but assume it wouldn’t let you.
The goal with the UI is just to have basic usability for users to test the system while a new UI is being designed. Since the UI is considered a temporary prototype these kinds of bugs won’t be fixed. In any case, we appreciate your feedback!
1 Like