Submission Details
Severity:
People can claim the airdrop multiple times
Summary
claim method on MerkleAirdrop.sol file has no control for already claimed airdrops. People can call it multiple times and get tokens many times.
Vulnerability Details
claim method on MerkleAirdrop.sol file has no control for already claimed airdrops. People can call it multiple times and get tokens many times.
Impact
Tokens get drained by smart people.
Tools Used
Recommendations
Control whether an account claimed before or not. If claimed, throw "Already Claimed" error.
Updates
Lead Judging Commences
patrickalphac
about 1 year ago
inallhonesty
about 1 year ago
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
multi-claim-airdrop
Rewards breakdown
nSLOC
62This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.