Submission Details
Severity:
No Input Validation in createContest function
Summary
The createContest function does not validate that the lengths of the players and rewards arrays are the same.
Vulnerability Details
The function creates a new Pot contract using the players and rewards arrays without ensuring their lengths match, which can lead to incorrect initialization.
Impact
Mismatched array lengths can cause the Pot contract to be initialized with inconsistent data, potentially leading to incorrect or erroneous behavior.
Tools Used
Manual Review
Recommendations
Add validation to ensure that the lengths of players and rewards arrays are equal before creating the Pot contract.
require(players.length == rewards.length, "Players and rewards length mismatch");
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.