Submission Details
Severity:
Recipient can steal other's airdrop.
Summary
Single recipient can claim all the airdrop by calling claim multiple times.
Vulnerability Details
claim function can be called multiple times by the recipient ,which will give him all the available USDC that was meant to be for others.
Impact
user can steal all the airdrop.
Tools Used
Manual review
Recommendations
Record the address of the user who have already claimed the airdrop and do not allow him if he calls the claim function again.
Updates
Lead Judging Commences
inallhonesty
over 1 year ago
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
multi-claim-airdrop
Rewards breakdown
nSLOC
62This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.