Summary

No check for minimum contest periode

Vulnerability Details

When creating a new contest, the function setContest() only checks if the contest period is not more than the maximum allowed and is not set to an old date. However, there is no check for very small contest periods. Therefore, a contest could be opened and closed on the same date if the attacker chooses a date that is equal to block.timestamp. In addition, a small period could also make the contest useless as they will not give sufficient time to Supporters to work on the contest.

Impact

Sponsors funds lost with no value

Tools Used

Manual

Recommendations

Check for a minimum when setting the contest period.