First Flight #13: Baba Marta

Summary

startEvent() should only run once as it can lead to discrepancies or mismanagement of event start and end times, as well as participant states.

Vulnerability Details

The function startEvent() can run as many times as the owner wants.

Impact

This can lead to many issues like the event never ending as the owner can keep adding duration. Multiple EventStarted() emitted causing confusion to indexers.

Tools Used

Manual inspection

Recommendations

add a requirement such as
require(eventEndTime == 0, "Event has already started");