First Flight #13: Baba Marta

Description

Any address can vote for its favorite listed tokens.
However, an attacker (or malicious producer) can create as many account they wants to vote for its prefered token.

Risk

Likelyhood: High

• Anyone, anytime, only gas cost.

Impact: High

• Attacker/malicious producer can infinitely vote for the token they want and win the election.

Recommended Mitigation

Add a condition to vote, like owning at least 1 or 2 Martenitsa token to prevent this kind of attack. If the token is offered to another person, remove the vote of this token to prevent any abuse of the system.