The refund function uses sendValue to send the refund. If the fallback function of the recipient contract throws an exception or consumes more than 2300 gas, the send will fail.
use Call instead of sendValue.
reentrancy in refund() function
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.