Submission Details
Severity:
NewSignup event Incorrectly Emitted in Receive() function
Summary
Emission of new signup in receive() violates the protocol invariant that no signups should occur via ETH.
Vulnerability Details
receive() external payable {
etherBalance[msg.sender] += msg.value;
emit NewSignup(msg.sender, msg.value, true); //@audit violates non-eth signups invariant.
}
Impact
An event emitted that is not consistent with the protocol invariant that no signups should occur using ETH deposits.
Tools Used
Manual review
Recommendations
Refactor as follows:
receive() external payable {
etherBalance[msg.sender] += msg.value;
}
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.