Lack of Restriction on Game Fee
Summary
The startGame function accepts any msg.value greater than or equal to 1 ether, but it does not restrict or return excess funds.
Vulnerability Details
The function allows players to send more than the required 1 ether to start the game, but it does not handle or refund the excess amount. This could lead to players accidentally overpaying.
Impact
Excess funds could be locked in the contract, resulting in a poor user experience and potentially causing a loss of funds for the players.
Tools Used
Manual Code Review
Recommendations
Ensure that the msg.value is strictly 1 ether. If any excess is sent, it should be refunded to the player immediately.
Lead Judging Commences
[INVALID] User mistake, too much ETH sent
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.