Mystery Box

First Flight #25
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: medium
Invalid

user will pay more than the seedvalue unintentionally

Summary

Vulnerability Deta

require(msg.value >= SEEDVALUE, "Incorrect ETH sent");

this require statement is implemented to make sure the msg.value >= seedvalue, but there is a vulnability in this logic

this logic will accept any payment that is more than the seedvalue instead of accepting a specific amount that is equal to the seedvalue(0.1 eth), making it inconvienence for users

Impact

users will pay more than the excact seedvalue unintentionally, making it expensive for users

Tools Used

manual

Recommendations

- require(msg.value >= SEEDVALUE, "Incorrect ETH sent");

+ require(msg.value = SEEDVALUE, "Incorrect ETH sent");

Updates

Appeal created

inallhonesty Lead Judge 8 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.