Christmas Dinner

First Flight #31
Beginner FriendlyFoundrySolidity
100 EXP
View results
Submission Details
Severity: medium
Valid

Deposits Possible After Deadline Has Passed

Summary

User's are able to deposit funds to the contract after the deadline has passed.

Vulnerability Details

If a user uses the receive() function to make payment to attend the event, they are able to do so even after deadline has passed. This is because the function does not enforce a deposit deadline similar to the deposit() function.

Impact

This means that user's can continue to make deposits after the deadline which may affect the host's ability to properly plan for the event.

Tools Used

Manual review.

Recommendations

Add the beforeDeadline modifier to the receive() function to ensure that there are no deposits after deadline.

Updates

Lead Judging Commences

0xtimefliez Lead Judge about 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

receive() function independant from deadline

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!