Submission Details
Severity:
MysteryBox::addReward() function doesn't add a reward to the actual prize pool
Summary
MysteryBox::addReward() doesn't add a reward to the pool as MysteryBox::openBox() has fixed probability values so the probability of getting the newly added reward is 0
Vulnerability Details
MysteryBox::addReward() doesn't add a reward to MysteryBox::openBox() so won't add it to the prize pool
Impact
Rewards are fixed so new rewards can't be added to the protocol
Tools Used
Manual Review
Recommendations
Allow
MysteryBox::openBox()to work with non fixed probabilities
Updates
Appeal created
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
addReward won't have any effect on openBox
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.