No check for address repetition for winners in _distribute() function.
There is no check for the winner's address repetition in the _distribute() function.
Someone can repeat his address in the winner's array to win much more rewards than others.
Manual review
Add a check for the winner's address repetition.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.