Submission Details
Severity:
Incorrect contest expiration validation may lead to contest manipulations
Summary
Incorrect expiration validation allows the owner to distribute rewards when the contest is not expired.
Vulnerability Details
It is verified if the saltToCloseTime[salt] + EXPIRATION_TIME > block.timestamp which allows to call the distributeByOwner and deployProxyAndDistributeByOwner functions when the saltToCloseTime[salt] + EXPIRATION_TIME == block.timestamp.
Impact
This may result in tokens distribution manipulations.
Tools Used
Recommendations
Verify if the saltToCloseTime[salt] + EXPIRATION_TIME not >= than block.timestamp.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.