Submission Details
Severity:
Lack Of Candidate Checks On Vote Submission
Summary
There is a lack of check on candidate list when a vote is submitted.
Vulnerability Details
The lack of checks include:
no check on duplicate candidates
no check on zero length
orderedCandidates
Impact
The voter potentially loses their right to vote correctly.
Tools Used
Manual review, testing
Recommendations
Consider adding the candidate list checks before completing the vote recording.
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
rankCandidates() allows duplicate votes inside the `orderedCandidates` array
Appeal created
inallhonesty about 1 year ago
Submission Judgement Published Reason: Incorrect statement
Assigned finding tags:
rankCandidates() allows duplicate votes inside the `orderedCandidates` array
Rewards breakdown
nSLOC
140This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.