Submission Details
Severity:
User can add the same charity to the registry more than once
Summary
Users can add address of charity with CharityRegistry::registerCharityfunction. Then, the charity can be verified by admin and donated.
Vulnerability Details
CharityRegistry::registerCharityshould have check if the charity was already register.
Impact
User can add the same charity to the registry more than once.
Tools Used
Manual review
Recommendations
Add bool require statement.
function registerCharity(address charity) public {
require(registeredCharities[charity] == false, "Charity already registered.");
registeredCharities[charity] = true;
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.