Submission Details
Severity:
selectWinner overflow risk
Summary
selectWinner function is vulnerable to an overflow
Vulnerability Details
The calculation of totalFees = totalFees + uint64(fee) can overflow
Because the contract is using Solidity 0.7.6, there is no automatic safe math.
Impact
Incorrect calculation of total fees to be sent to dev wallet
Tools Used
VSCode
Recommendations
either use solidity 0.8.x, or use OpenZeppelin's SafeMath to avoid overflows issues.
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.