Missing Deadline Check in receive() Function
Summary
The receive() function allows ETH deposits without checking if the deadline has been set. This can lead to ETH deposits being accepted before the deadline is initialized.
Vulnerability Details
The
beforeDeadline()modifier, which ensures that actions cannot occur after the deadline, is not applied to thereceive()function.As a result, ETH can be sent to the contract even before the deadline is set, which may not align with the intended contract logic.
Impact
ETH can be deposited into the contract before the deadline is set, potentially bypassing critical logic that depends on the deadline being established.
This could result in confusion or unintended behavior in the contract.
Tools Used
Manual review
Recommendations
Add the beforeDeadline() modifier to the receive() function to ensure that ETH deposits are rejected if the deadline has not been set:
Lead Judging Commences
receive() function independant from deadline
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.