Submission Details
Severity:
Owner cannot set the treat cost.
Summary:
Owner cannot call the setTreatCost function, when setting it for the first time.
Vulnerability Details:
When the owner wants to call the setTreatCost function and set the cost, he needs to pass this check:
require(treatList[_treatName].cost > 0, "Treat must cost something.");
But, the cost defaults to 0, which means, the owner cannot set the cost, because it doesn't pass this check.
Impact:
Destroys whole contract's functionality.
Tools Used:
Manual review
Recommendations:
Remove the check completely, or create another function, that allows the owner to set the cost to 1. Then he can call setTreatCost function.
Rewards breakdown
nSLOC
109This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.