Submission Details
Severity:
Incorrect Reward Values
Summary
The reward values for Silver Coin and Gold Coin are incorrect in openBox().
Vulnerability Details
The values for the Silver Coin and Gold Coin rewards in openBox() do not match the intended value specified in the constructor. Here the values for each coin are twice the amount originally declared.
Impact
This will result in users that win either coin leaving with twice the value for each than was originally intended.
Tools Used
Manual Review
Recommendations
When pushing a reward to rewardsOwned() reference it from rewardPool() by reading the index of the respective reward.
Updates
Appeal created
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
The rewards in constructor are different from the rewards in openBox
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.