fix access control

manifoldfinance · Oct 2, 2023 · a84260a · a84260a
1 parent d7de56e
commit a84260a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/MevEth.sol b/src/MevEth.sol
@@ -351,6 +351,9 @@ contract MevEth is Auth, ERC20, IERC4626, ITinyMevEth {
     /// @notice Grants rewards updating the fraction.elastic.
     /// @dev called from validator rewards updates
     function grantRewards() external payable {
+        if (msg.sender != mevEth) {
+            revert MevEthErrors.UnAuthorizedCaller();
+        }
         if (msg.value == 0) revert MevEthErrors.ZeroValue();
 
         fraction.elastic += uint128(msg.value);