Submission Details
Severity:
Duplicate winners are possible
Summary
Duplicate winners are possible
Vulnerability Details
The Distributor.sol::distribute() method doe snot check if duplicate winners are being sent
function distribute(address token, address[] memory winners, uint256[] memory percentages, bytes memory data)
Impact
A winner can be repeated in the winners by mistake, which can lead to the duplicate winner getting more funds
Tools Used
Manual Code Review
Recommendations
Add a check to ensure that the list of winners are not repeated
Auditor
NeoCrao
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.