Summary

The setPrediction function in the ScoreBoard contract lacks access control,An attacker can exploit the lack of access control in the setPrediction function to cause a Denial of Service (DoS) attack.

By repeatedly calling this function, the attacker can consume significant gas and potentially prevent legitimate users from interacting with the contract.

Vulnerability Details

setPrediction() in the ScoreBoard contract lacks proper access control, allowing any user to call it directly.

Impact

This vulnerability can lead to a Denial of Service (DoS), where legitimate users are unable to update their predictions or interact with the contract due to excessive gas consumption caused by the attacker.

Tools Used

Manual review

Recommendations

add an access control to the function setPediction()