Sparkn

Summary

Proxy address can be calculated beforehand and can be deployed at the same address

Vulnerability Details

Since the proxy address is known beforehand using getProxyAddress() an attacker can watch the mempool for the deployment of the proxy from the organizer and can frontrun it and basically let not deploy the proxy and can break the whole functionality of the protocol, an organizer can never get to deploy a proxy and so no new contest can be set up.

Impact

DoS in deploying the proxy

Tools Used

Manual Review

Recommendations

Make the getProxyAddress() as internal and onlyOwner function