Submission Details
Severity:
`ThePredicter::withdraw()` has external calls inside a loop: cScore = scoreBoard. This results in the contract being at risk of be susceptible to a denial-of-service attack.
Summary
Calls inside a loop might lead to a denial-of-service attack.
Vulnerability Details
- getPlayerScore(players[i]) (src/ThePredicter.sol#122)
Impact
Loops in withdraw() can be problematic if players array is large.
Tools Used
Slither
Recommendations
Consider alternative designs to avoid unbounded loops by favoring pull over push (https://github.com/ethereum/wiki/wiki/Safety#favor-pull-over-push-for-external-calls) strategy for external calls.
Rewards breakdown
nSLOC
191This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.