Submission Details
Severity:
Horse ID Check
Summary
The functions feedHorse() and isHappyHorse() do not have anything to check whether or not the provided ID exists.
Vulnerability Details
This could lead to wasted transactions.
Impact
This is a low-risk vulnerability because it is not related to any funds.
Tools Used
I used unit tests to find that missing check.
Recommendations
As I have done in the provided GitHub link, my recommendation would be to add a modifier that checks whether or not the provided ID exists.
Updates
Lead Judging Commences
inallhonesty
over 1 year ago
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
Nonexistent horses can be fed
Rewards breakdown
nSLOC
460This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.