Submission Details
Severity:
Inconsistent input validations
Summary
In several functions (e.g., addReward), there is no check on the input values, which could lead to potential errors or unintended behavior
Vulnerability Details
When adding a reward, there is no validation of the _value or _name.
Impact
This could lead to potential errors or unintended behavior (e.g., unintentionally adding rewards with zero value).
Tools Used
Manual review.
Recommendations
Add input validation for critical inputs, for example:
function addReward(string memory _name, uint256 _value) public onlyOwner {
require(bytes(_name).length > 0, "Invalid name");
require(_value >= 0, "Invalid reward value");
rewardPool.push(Reward(_name, _value));
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.