Submission Details
Severity:
Incorrect Index Range
Summary
The claimSingleReward function uses an incorrect range for _index.
Vulnerability Details
The check on line 93 includes the length of the rewardsOwned array as a possible index value.
Impact
This will permit users to pass in an incorrect index (_index == rewardsOwned[msg.sendr].length) which is an out of bounds value. The result is that all calls using this value will fail.
Tools Used
Manual Review
Recommendations
On line 93 use < instead of <= when verifying the index range.
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.