Submission Details
Severity:
Lack Of Deadline Handling
Summary
The changeHost function does not restrict changing the host after the deadline, even though the documentation assumes such changed will involve agreements, without this restriction, malicious host changes could disrupt the event.
Impact
Allowing the host to be changed after deadline can disrupt the event, especially if there is no actual agreement.
Tools Used
Manual review
Recommendations
Add a deadline check (if applicable) to prevent changes after the event start.
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.