Submission Details
Severity:
Purgins `msg.sender` position rather than user
Summary
The purrgeBadPawsitionfunction should purge someone else's position rather than the msg.sender. But in the contract its the opposite.
Vulnerability Details
Impact
The protocol will burn the wrong person position. Resulting in distrust in the protocol and unintended behavior.
Tools Used
Manual review
Recommendations
Change the following line to follow the correct of the protocol.
- i_kittyCoin.burn(msg.sender, totalDebt);
+ i_kittyCoin.burn(_user, totalDebt);
Rewards breakdown
nSLOC
224This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.