Submission Details
Severity:
isVerified function giving incorrect information
Summary
isVerified function inside CharityRegistry.sol doesnt work as expected
Vulnerability Details
Currentlyt the function will return True even if charity is not registered.
return registeredCharities[charity];
Impact
Incorrect information will be given to end user when they are using this function
Tools Used
Manual review
Recommendations
Change it to this line
return verifiedCharities[charity];
Updates
Lead Judging Commences
n0kto 12 months ago
Submission Judgement Published Assigned finding tags:
finding-isVerified-return-registered-charities
Likelyhood: High, the function returns registered charities instead of verified ones. Impact: High, Any charities can be registered by anyone and will be declared as verified by this function bypassing verification.
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.