Generator can respond with empty output and erase agent's state if selected as best response
Summary
Natspec for the respond function states that the output provided by the generator has to be non-empty:
That is however not enforced by function implementation. If response with empty output is selected as the best response in withdraw phase it will set agent's new state to empty output.
Vulnerability Details
Even though it is not likely that response with empty output is selected as best, likelihood increases if generator also runs validator(s) using different accounts and impacts the scoring in that way.
Impact
Agent's state can be set to empty value
Tools Used
Manual review
Recommendations
Add check that generator's output is not empty
Lead Judging Commences
Incomplete checks in `respond()` of `LLMOracleCoordinator.sol`, `output` is not checked
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.