Submission Details
Severity:
no check on address validity
Summary
no check on address validity
Vulnerability Details
in ContestManager.sol , lines 48-51. there is no check on address validity. function must check wether provided address is a valid pot or not
function getContestRemainingRewards(address contest) public view returns (uint256) {
// @audit check is needed
Pot pot = Pot(contest);
return pot.getRemainingRewards();
}
Impact
no impact in scope of this contracts , but it would not be safe for some other contract to use this function, because it can be easily manipulated
Tools Used
no tools , no **Homo habilis **
Recommendations
add check on address validity
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.