Project
One World
NFTDeFi
15,000 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Members who joins after sendProfit will get same rewards as members who joins before

abhan

Summary

Users gets same rewards whether they joins before sendProfit or after sendProfit.

Vulnerability Details

Suppose at t=10, admin has sent the profits in the contract to ditribute to the members and at t=20 admin has sent profits again.

In above case user who joins at t=1 to t=19 will get same rewards.

Impact

Both users get same rewards will be unfair to user who joins early.

Tools Used

Manual Review

Recommendations

Protocol should consider the timestamp of the user joining to distribute the rewards.

Updates

Lead Judging Commences

0xbrivan2 Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement
0xbrivan2 Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.