Description: Important state variables such as ChristmasDinner::participant
, ChristmasDinner::balances
, ChristmasDinner::etherBalance
, and ChristmasDinner::whitelisted
have no visibility set and therefore have the internal visibility by default.
Impact: The partcipants/users can't check if they already deposited any funds into the contract, therefore they can't find out if they already joined the event. Additionally can't check their token nor ether balances and can't check which tokens are whitelisted.
Proof of Concept:
None
Recommendation: Make the important state variables public for users to see key information about their involvement in the event.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.