Submission Details
Severity:
The Call To `closePot()` Can Be Front-run
Summary
Function ContestManager::closeContest() that executes Pot::closePot() can be frontrun by any players who have not yet claimed their cuts.
Vulnerability Details
If front-running occurs, the manager's cut will be smaller.
Impact
Smaller amount for manager.
Tools Used
Manual review.
Recommendations
Consider preventing calls to claimCut() when block.timestamp exceeds the claim deadline.
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.