Submission Details
Severity:
Inconsistency Between Code and Comment
Summary
User's are unable to signup others for the event which contradicts the contest's details.
Vulnerability Details
On line 108 (and in the contest's details) it mentions that participants can signup friends for the event. However, the code in the deposit() function only allows a user to signup themselves.
Impact
This means that despite the description a user is unable to signup anyone elese but themselves.
Tools Used
Manual review.
Recommendations
Either update the code in deposit() to allow users to signup a friend, or remove the comment.
Updates
Lead Judging Commences
0xtimefliez about 1 year ago
Submission Judgement Published Assigned finding tags:
Deposit function lacks functionality
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.