First Flight #14: AirDropper

First Flight #14

Beginner FriendlyDeFiFoundry

100 EXP

Submission Details

Severity: high

Valid

Lack of check for already claimed accounts in `MerkleAirdrop::claim` allows anyone to drain the contract of USDC token funds

Updates

inallhonesty Lead Judge 12 months ago

Submission Judgement Published

Validated

Assigned finding tags:

nSLOC

This contest has a flat reward structure with the following payouts:

High

100 EXP

Medium

20 EXP

Low

2 EXP

The contest is live. Earn rewards by submitting a finding.

Submissions are being carefully reviewed by our judges.

This is your time to appeal against judgements on your submissions.

Appeals are being carefully reviewed by our judges.

The contest is complete and the rewards are being distributed.

Support

Can’t find an answer? Join our Discord or follow us on Twitter.