Submission Details
Severity:
No check for address repetition for winners in _distribute() function
Summary
No check for address repetition for winners in _distribute() function
Vulnerability Details
There is no check for winner's address repetition in _distribute() function.
Impact
Someone can repeat his address in the winners array to win much more reward than others.
Tools Used
Manual review
Recommendations
Add a check for winner's address repetition.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.