Submission Details
Severity:
Not Checking Inputs Properly
Summary
The contract does not validate that the number of players matches the number of rewards.
Vulnerability Details
If the players and rewards arrays passed to the contract's constructor are of different lengths, this could lead to out-of-bounds errors or incorrect reward distribution.
Impact
Participants might receive incorrect rewards or none at all.
Tools Used
Manual review
Recommendations
Validate the length of the arrays in the constructor:
require(players.length == rewards.length, "Players and rewards length mismatch");
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.