A privileged role can enrol a holder without their consent and capture their yield
- Severity
- High
- Class
- Access control
- System
- Token-extension program
A manager role adds a holder to a yield arrangement without permission, redirecting yield the holder never agreed to give up.
An enrolment action that changed how a holder's yield was handled required no consent from that holder. A manager role could simply add a non-consenting account, and from then on its yield flowed under rules the owner never agreed to.
Consent is the whole point of an opt-in arrangement; without the check, opt-in becomes opt-out-if-you-notice.
Why it rated High
Yield belonging to a non-consenting holder is redirected by a privileged role — theft of yield gated on that role.
The fix class
Require explicit holder consent before enrolling any account into the arrangement.
