The contract cannot accept ETH either through direct transfers or via the script, as it lacks a receive()
or fallback()
function.
This could lead to potential loss of user funds, as users may be unable to claim their prize if the contract does not have sufficient ether available.
The contract has no way to receive ether.
The vulnerability may result in users' funds being trapped. If the contract lacks sufficient ether and the transfer fails, users will be unable to claim their prize and will also lose the 1 ether they initially deposited.
Manual Review
It is recommended to implement a receive()
or fallback()
function to allow the contract to accept ether transfers and properly fund the contract.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.