Submission Details
Severity:
Missing input validation
Description: The function validateTransaction is missing input validation.
Impact: Lack of input validation could lead to unexpected behaviour if malicious transactions are submitted.
Recommended Mitigation:
Add input validation for the transaction struct fields
function _validateTransaction(Transaction memory _transaction) internal returns (bytes4 magic) {
+ require(_transaction.to != address(0), "Invalid recipient");
+ require(_transaction.value <= address(this).balance, "Insufficient balance");
// rest of the function
}
Rewards breakdown
nSLOC
105This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.