Illuminating vulnerabilities before they're exploited.

1contract Vault {
2  mapping(address => uint256) public balances;
3  address public owner;
4
5  function withdraw(uint256 amount) external {
6    require(balances[msg.sender] >= amount);
7    (bool ok, ) = msg.sender.call{value: amount}("");critical
8    // return value of call is never checkedmedium
9    balances[msg.sender] -= amount;
10  }
11
12  function setOwner(address n) external {
13    require(tx.origin == owner);high
14    owner = n;
15  }
16}