First Flight #20: The Predicter

Summary

functions like makePrediction, setPrediction, setResult, and withdraw needs to emit corresponding events when called because those functions change the protocol contracts' states with very sensitive data that the users of the protocol need to verify.

Vulnerability Details

For instance, without event emissions, a player will not be able to verify that the organizer actually uploaded the right result of the matches, which makes the protocol not to be transparent. Secondly, she may not be able to verify her predictions and assert if it had been changed or not in the case of dispute of match result.

Impact

• lack of trust for the protocol hence low revenue generation and consequently little or no funds to pay for hall

Tools Used

• Manual review

Recommendations

• emit events in makePrediction, setPrediction, setResult, and withdraw functions.