Submission Details
Severity:
Duplicate Sign-Ups in receive function
Summary
If a user sends Ether multiple times to the contract, their participation status is updated repeatedly, and duplicate events are emitted.
Vulnerability Details
Impact
Duplicate Sign-Ups in receive
Tools Used
mannual review
Recommendations
Add a check to avoid duplicate updates to participant
receive() external payable {
+ if (!participant[msg.sender]) {
+ participant[msg.sender] = true;
+ }
etherBalance[msg.sender] += msg.value;
emit NewSignup(msg.sender, msg.value, true);
}
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.