The distributePoints
function can be called by anyone at any time, which may lead to unexpected or unnecessary state changes.
Risk: This can allow a malicious user to call distributePoints
at an inopportune moment, potentially causing undesired point distribution and impacting the fairness of the rewards.
Solution: Implement access control to restrict who can call the distributePoints
function, or ensure that it can only be called under specific conditions.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.