Submission Details
Severity:
Contest can only be closed by the owner, which can lead to locked funds if the owner fails to call the function
Description: In ContestManager::closeContest() and Pot::closePot(), the functions can only be called by the owner.
function closeContest(address contest) external onlyOwner {
// ...
}
function closePot() external onlyOwner {
// ...
}
Impact: If the owner fails to call the function, the funds will be locked in the contract, and the claimants will not be able to claim their rewards. This will lead to funds locked in forever.
Recommended mitigation: Make this a public function so that anyone can call the function to close the contest and distribute the rewards. This will ensure that the funds are not locked in the contract and the claimants can claim their rewards.
- function closeContest(address contest) external onlyOwner {}
+ function closeContest(address contest) external {
// ...
}
- function closePot() external onlyOwner {}
+ function closePot() external {
// ...
}
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.