Submission Details
Severity:
stuck eth
Summary
rewards are divided by total voters, but only distributed to 'For' voters, leaving eth unclaimable in the contract
Vulnerability Details
a specific amount of eth is deposited at construction. that eth is either returned to the creator, or divided and sent to the 'For' voters if it passes. However, line 192 divides the deposited eth by all voters, but line 194-209 send that eth only to 'For' voters. unless the vote is unanimously 'For' there will be eth left stuck in the contract.
Impact
stuck eth
Tools Used
reading the repo on github
Recommendations
divide by totalVotesFor instead of totalVotes.
Updates
Lead Judging Commences
0xnevi over 1 year ago
Submission Judgement Published Assigned finding tags:
VotingBooth._distributeRewards(): Incorrect computation of rewardPerVoter
Rewards breakdown
This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.