Submission Details
Severity:
_refundETH and _refundERC20 should still follow CEI regardless of mutex lock used in refund()
Summary
smart contracts which utilize tokens that can cause reentrancy should always follow CEI for maximum security of the user funds and the protocol funds. In this contract the nonreentrant modifier is broken and could lead to draining of user and protocol funds.
Tools Used
Manual review
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.