Submission Details
Severity:
Misleading function name `call` may cause player confusion and financial loss in `TwentyOne` contract
Summary
The TwentyOne::callfunction has a misleading name causing confusion for players and unintended gameplay since calling the function would make the player stand and call is not a black jack term.
function call() public {
// code as is
Vulnerability Details
A player could misinterpret the function as calling for a new card instead of standing leading to uninteded gameplay. This could lead to erosion of trust and bad user experience.
Tools Used
Manual code review
Recommendations
Rename the function to standso it is clear what the function does.
function stand() public {
// code as is
Rewards breakdown
nSLOC
147This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.