Submission Details
Severity:
Reentrancy vulnerability
Summary
TokenDivider:: claimNft Reentrancy vulnerability
Vulnerability Details
State updates occur after external calls, leaving the contract vulnerable to reentrancy attacks.
Impact
Reentrancy exploits can result in significant financial losses, as attackers may drain all the fraction of nft and claim it or tokens held in the vulnerable claimNft.
Tools Used
Manual review
Recommendations
Update state variables before making external calls.
Alternatively, use a reentrancy guard.
+ // Example: Using OpenZeppelin's ReentrancyGuard
contract TokenDivider is ReentrancyGuard {
function claimNft(address nftAddress) external nonReentrant {
// Logic here
}
}
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.