Trick or Treat

First Flight #27
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Invalid

User cannot withdraw money if didn't send enough ETH and doesn't have any more money.

Summary:

User loses money, if he didn't send enough ETH and doesn't have more money to send.

Vulnerability Details:

If user wants to buy a NFT, but doesn't send enough money and doesn't have any more money to send. He cannot get his money back and doesn't get anything in return.

Impact:

Money loss for the user.

Tools Used:

Manual review

Recommendations:

Add a function, that allows user to withdraw money.

Updates

Appeal created

bube Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.