60,000 USDC
Submission Details
Severity:
Eth could get stuck in the `addMessageHashForAutoWithdraw` function
Summary
the function `addMessageHashForAutoWithdraw` is payable but there is no accounting for the possible ETH sent
Vulnerability Details
this means that any ether sent in this function is lost and not recoverable
Impact
any eth sent in this function is stuck in this contract
Tools Used
manual audit
Recommendations
consider making this function not payable
Updates
Lead Judging Commences
n0kto 12 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.