Summary

Players who made one prediction are not eligible for reward.

Vulnerability Details

The method ScoreBoard::isEligibleForReward is determines if a user would be able to withdraw prize pool based on the prediction's count that were made by the user. The docs specifies that anyone who made at least one prediction is eligible for it but the current implementation of the method requires at least 2

Impact

Players who made one prediction are not eligible for reward despite the docs specifying that at least 1 prediction needs to be made which leads to unexpected behaviour and for funds to remain stucked in the contract (if the user that made one prediction guessed correctly).

Tools Used

Manual review

Recommendations

Rewrite the ScoreBoard::isEligibleForReward method in a way that checks if at least one prediction was made by the user: