`MondrianWallet._payPrefund(uint256)` sends eth to arbitrary user making it vulnerable to a reentrancy attack.

Updates

InAllHonesty Lead Judge 5 months ago

Submission Judgement Published

Invalidated

Reason: Lack of quality

Rewards breakdown

nSLOC

This contest has a flat reward structure with the following payouts:

High

100 EXP

Medium

20 EXP

Low

2 EXP

The contest is live. Earn rewards by submitting a finding.

Submissions are being carefully reviewed by our judges.

This is your time to appeal against judgements on your submissions.

Appeals are being carefully reviewed by our judges.

The contest is complete and the rewards are being distributed.

Support

Can’t find an answer? Join our Discord or follow us on Twitter.