Compromise Risk Due to Immutable STADIUM_ADDRESS
Summary
There is no way to change the STADIUM_ADDRESS if it is compromised
Vulnerability Details
I understand the STADIUM_ADDRESS is immutable but this is a possible vulnerability if the this address is compromised in any way, specially in the case of the STADIUM_ADDRESS becomes blacklisted by any token, this will revert every attempt to send it the commission from any contest.
Impact
If the STADIUM_ADDRESS is compromised in any way the prize will be locked forever.
Tools Used
Manual
Recommendations
add a function controlled by an owner that can change the STADIUM_ADDRESS in case something goes wrong. maybe also add a timelock if necessary.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.