Incorrect Verification Status Check in CharityRegistry::isVerified Function
Summary
The isVerified function incorrectly checks if a charity is registered rather than verified, leading to potential misinformation about a charity's verification status
Vulnerability Details
The function currently returns the registration status (registeredCharities[charity]) instead of the verification status (verifiedCharities[charity]).
Impact
Users may trust unverified charities, leading to potential misuse of funds or support.
Tools Used
Manual Review
Recommendations
Update the function to return verifiedCharities[charity] to accurately reflect the verification status.
Lead Judging Commences
finding-isVerified-return-registered-charities
Likelyhood: High, the function returns registered charities instead of verified ones. Impact: High, Any charities can be registered by anyone and will be declared as verified by this function bypassing verification.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.