Ensure token address is not an EOA account
Distribute function does not check for contract existence for token parameter.
A user can accidently provide EOA account that can lead to undefined behaviour.
Manual code review
Implement a contract existence check before each call.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.