Submission Details
Severity:
ZERO_ADDRESS_CAN_BE_CHOSE_AS_WINNER
Summary
If user who refunded is chosen in the lottery, money are burnt
Vulnerability Details
Winner is chose among the players array that contains zero address for users who refunded. If zero address is chose as a winner, collected money are burnt
Impact
Lost money of the round
Tools Used
Recommendations
Choose only among users who are not refunded
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Assigned finding tags:
zero address can win the raffle
Funds are locked to no one. If someone gets the refund issue, they also got this issue. IMPACT: High Likelihood: High
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.