Cancel Withdrawal Functionality Missing In PriorityPool
Summary
Once a user Initiates a Withdrawal Request and the request is queued , there is no mechanism/Functionality to cancel the request.
Vulnerability Details
The PriorityPool.solallows the users to initiate a Withdrawal. If a user later wants to cancel the Withdrawal Request due to change of intent or any other reason , the user can't do that.
Impact
No flexibility to handle mistakes by the user.
The Impact is low but the likelihood is High.
Tools Used
Manual Review
Recommendations
Add a cancelWithdrawal functionality. Make sure it's been called by the initiater of the withdrawal function only.
Ensure there is a time interval between cancelWithdraw and the next withdrawalRequest .
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.