/* * @source: https://github.com/trailofbits/not-so-smart-contracts/blob/master/unprotected_function/Unprotected.sol * @author: - * @vulnerable_at_lines: 25 */ pragma solidity ^0.4.15; contract Unprotected{ address private owner; modifier onlyowner { require(msg.sender==owner); _; } function Unprotected() public { owner = msg.sender; } // This function should be protected // ACCESS_CONTROL function changeOwner(address _newOwner) public { owner = _newOwner; } /* function changeOwner_fixed(address _newOwner) public onlyowner { owner = _newOwner; } */ }