Submission Details
Severity:
For users signuped with ether, the participant state will not be updated
Summary
For users signuped with ether, the participant state will not be updated.
Vulnerability Details
In the receive function:
receive() external payable beforeDeadline {
etherBalance[msg.sender] += msg.value;
emit NewSignup(msg.sender, msg.value, true);
}
user can send ether and signup, but participant state will not be updated.
Impact
getParticipationStatus function will always return false for users signuped with ether, and can not be set to new host.
Recommendations
Add participant update in receive function:
receive() external payable beforeDeadline {
+ participant[msg.sender] = true;
etherBalance[msg.sender] += msg.value;
emit NewSignup(msg.sender, msg.value, true);
}
Updates
Lead Judging Commences
0xtimefliez 8 months ago
Submission Judgement Published Assigned finding tags:
receive does not update participation status
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.