OpenEden Disclosed Report

https://github.com/OpenEdenHQ/openeden.vault.audit/tree/d18288e944df21729b18d430b2afec2da99b6287

Summary

The reIssue() function is used to migrate or upgrade TBILL tokens by burning the old ones from a source address and minting to a destination address. However, it calls _validateKyc() on both _from and _to. This disallows reissuing TBILLs from a banned user — even though this should be a key use case for the function.

---

Recommendation

Only validate KYC status of the recipient (_to) in reIssue():

soon...