DoS: Blacklisted user may prevent claimRewards()
Summary
Blacklisted user may prevent claimRewards() from calling.
Vulnerability Details
If for some reason user got blacklisted by token contract (correspondingly), these rewards will be permanently frozen as now there is no mechanics to move them to another address or specify the recipient for the transfer. And Everytime claimRewards() would revert.
Impact
No one would be able to claimRewards() due to user being blacklisted.
Tools Used
Manual Review.
Recommendations
Instead of sending tokens directly to the user or recipient in claimRewards(), consider storing the number of tokens in variables and having the user or recipient claim it later
Lead Judging Commences
informational/invalid
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.