Sparkn

CodeFox Inc.
DeFiFoundryProxy
15,000 USDC
View results
Submission Details
Severity: low
Valid

Organizer has no incentive to actually deploy the `Proxy`

Summary

If a user has an issue they would like solved, they can send 1000 USDC to the future Proxy address. This incentivizes users to help and also shows that the organizer is serious about wanting it to be solved.

Vulnerability Details

The issue lies in the phase directly after the organizer's problem has been solved, at this point they still need to deploy the Proxy contract and distribute the funds. The only issue is that they have no incentive to do so besides being a good person, especially since the Sparkn protocol has stated that any contracts not deployed by the deadline will be deployed by them.

Impact

This could become a common occurrence amongst the protocol's users, and if it does, it would cause the Sparkn developers to pay a lot of money out of pocket for Proxy deployment gas costs.

Tools Used

Manual Review

Recommendations

You could change the entire structure so that the contract is deployed prior to the contest being over/problem being solved. Another way to fix this is to hold an additional amount of money on behalf of the organizer until the organizer has deployed the Proxy, after the organizer upholds their end by deploying the Proxy and distributing the funds to the winners, the organizer could get x money back from the protocol.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.