First Flight #20: The Predicter

Summary

The entry fees may become stuck if no approved players place bets. This problem could lead to financial losses and operational disruption, as the funds would be inaccessible for distribution or refund.

Vulnerability Details

There is no function that caters to the situation when none of the approved players make a bet. If no approved players make bets, the entry fees will be stuck in the contract, making it impossible to access these funds. The withdraw function is designed to allow players to withdraw their rewards based on the number of points they have accumulated from making correct predictions. However, the current logic does not account for the scenario where no approved players make bets, leading to a situation where the entry fees remain in the contract without any mechanism for refund or redistribution.

Impact

Entry fees paid by participants may become inaccessible, leading to financial losses.

Tools Used

Manual Review

Recommendations

Implement Refund Mechanism: Introduce a mechanism to refund entry fees if no bets are placed by approved players.