First Flight #14: AirDropper

Summary

An address can make multiple claims, potentially claiming all 100 USDC.

Vulnerability Details

The claim function allows an address to claim a specified amount of USDC without any restrictions, potentially allowing a single address to claim all 100 USDC. This is because there is no check in place to prevent an address from making multiple claims or claiming the entire amount.

Impact

An attacker could exploit this vulnerability to drain the entire USDC balance, resulting in financial loss for the others.

Tools Used

Manual Review

Recommendations

Implement a mechanism to track claimed times per address and restrict subsequent claims if the address has already claimed .
Implement a mechanism to track check address if the address has already claimed .