Submission Details
Severity:
Factory address can claim all prize or take a major share of the prize
Summary
Factory address can claim all prize or take a major share of the prize
Vulnerability Details
Msg.sender can set himself as the main/only winner of the contest and can take major share of the rewards.
Impact
An attacker may steal whole or major part of the funds by adding his address in the winner list.
Tools Used
Manual code review
Manual code analysis
Recommendations
CEI should be placed in order of preventing factory address to be in the list of winners.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.