Sparkn

Summary

In current version of SPARKN contest is set first then supporters start to work on the project.In the meantime funds are collected and sent to proxy address . After the project ends rewards are distributed among the supporters(winners of the contest) .

The problem here is rewarding of supporters wholly depend on the organizer who is untrusted according to the protocol team. If funds are not sent by the organizer before the contest ends then the supporters won't get any rewards . Which goes straight against SPARKN's philosophy of "supporter first".

There may be off-chain procedure to tackle the issue but still the design leaves room for an organizer to fraud .

Vulnerability Details

See summary

Impact

Supporters getting no rewards !

Tools Used

Manual review

Recommendations

This design can make the escrow mechanism much more fraud proof :

Deploy the proxy first while setting contest and send whole fund of the contest to the proxy (Atleast a portion of it ,leave options for donations ). Distribute after the contest ends