Sparkn

Summary

There's possibility of duplicate of a winner's address existing in distribute function.

Vulnerability Details

There's no check in the distribute function for winners' inputs which are duplicates. A winner's address can be passed in more than once and the function will not throw an error.

It is possible for one same address to be entered two times thereby taking the place of another different address. And no error will be thrown since winners.length will still be equal to percentages.length.

Impact

Possible loss of prizes because of possibility of duplicate address existing.

Tools Used

Manual review

Recommendations

Check for duplicate winner's address.