MyCut

Summary

There is no check to confirm if the total rewards parsed is equal to the sum of all the player rewards

Vulnerability Details

• if an owner creates a contest with [player 1, player2, player3] and rewards [1,2,3]

• if the owner decides to parse 4 as total rewards

• One of the players would not be able to claim their rewards because the amount that would be funded to the contest would not be enough to carter for all the players.

Impact

Some Players might not be able to get rewards

Tools Used

Manual Review

Recommendations

Check to Make sure totalRewards is equal to the sum of all the rewards for players