Voters can be bribed
Summary
Voters can be bribed to vote for the proposal as total rewards can be increased by anyone.
Vulnerability Details
The comment stating that there is intentionally by design no way to decrease or increase this amount is not followed in the code.
Any findings related to not being able to increase/decrease the total reward amount are invalid
Here the total rewards can be increased.
The total rewards use the balance of the contract. Anyone can send ETH to the contract through a selfdestruct and influence the vote.
Impact
Voters can be bribed.
Tools Used
Manual review
Recommendations
Do not rely on the address(this).balance for the total rewards.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.