Distribution to winners by owner can be automated by using chainlink keepers.
Summary
The deployProxyAndDistributeByOwner function can be automated after the EXPIRATION_TIME of 7 days passes, by implementing Chainlink keepers for automation.
Vulnerability Details
The owner manually having to call deployProxyAndDistributeByOwner after EXPIRATION_TIME introduces more centralization to the system and can be hindered by various human factors. This could cause supporters to wait for a much extended period of time before receiving their rewards in events of unforeseen circumstances.
Impact
Supporters rewards get delayed and sponsors funds become unused/stuck
Tools Used
Manual Review
Recommendations
Make the ProxyFactory contract keeper compatible and automate the distribution of rewards in exactly EXPIRATION_TIME number of days after contest ends
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.