Submission Details
Severity:
The state variable `owner` in the `ScoreBoard.sol` contract is changeable and can be alter by any user.
Summary: In the ScoreBoard.sol contract, the owner address variable can be modified by any user. This would compromise the contract's centralized control, allowing anyone to alter scoreboard functions and variables.
Vulnerability Details: The following state variable of ScoreBoard.solcontract is mutable :-
```
address owner;
Impact : Anyone can set or change the contract's owner after deployment, severely compromising the intended functionality. This poses a significant risk to the contract's funds, as the new owner can manipulate scoreboard functions and variables.
Tools Used : Manual Review
Recommendations : Change the address ownerstate variable to address private immutable owner to prevent the alteration of the owner variable after the deployment of contract.
Rewards breakdown
nSLOC
191This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.