Submission Details
Severity:
The value of the variable `ChristmasDinner::locked` is always `false`. It will never be assigned as `true`, which could lead to re-entrancy exploitation in the future.
Description: The value of the variable locked is always false. Therefore, the nonReentrant modifier will not be effective.
Recommended Mitigation: Set the value of locked to true when function refund start.
function refund() external nonReentrant beforeDeadline {
+ locked = true;
address payable _to = payable(msg.sender);
_refundERC20(_to);
_refundETH(_to); // @audit-high Re-entrantcy
emit Refunded(msg.sender);
}
Updates
Lead Judging Commences
0xtimefliez about 1 year ago
Submission Judgement Published Assigned finding tags:
deadline is never set to true
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.