First Flight #13: Baba Marta

Summary

MartenitsaVoting::voteForMartenitsa does not charge any fees, so in order for someone to vote, they have to pay just the gas fee.
This could lead to bots voting or if the participants` pool is small, the users themselves can create multiple addresses.

Vulnerability Details

Especially if the HealthToken is valuable and the moment this would encourage participant to cheat and use bots to vote for their MartenitsaToken which will lead to unfair competition.

Impact

This could change the course of the vote, and the best martenitsa won't win because the voting was corrupted.

Tools Used

Manual Review

Recommendations

Charge a small fee or ask for a small amount of deposit and return it after the voting has ended.