A malicious user can take advantage of the protocol because UpgrageTier Function does not take into consideration difference in prices of different tiers
Summary
A user can upgrade their Tier to a higher tier, but this is done by just burning the previous token and minting another, not taken into consideration that different tiers could cost different amount.
Vulnerability Details
A creator creates a DAO with tier 0 cost 1 ether, tier 1 costing 0.5 ether and tier 2 costing 0.25 ether
An attacker joins tier 2 of the DAO which costs 0.25 ether
the attacker decides to upgrade tier which will cost 1 ether, but since they're upgrading it only burns their tier 2 tokens and mints tier 0 for them
Impact
Loss of funds to the DAO
Tools Used
Manual Code Review
Recommendations
Fix Upgrade function to consider price of each tiers
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.