MultiSig address not included in the Match event
Summary
When 2 users like each other, the protocol will create a MultiSig for them and send 90% of their total ETH to it. The next steps would be for the users to jointly use the multisig and spend their ETH.
However, the address of the MultiSig is not emitted in an event, nor kept in a public variable, making it unnecessary harder to be used by the users.
Impact
Poor user experience.
Tools Used
Manual review
Recommendations
Include the newly created MultiSig address to the event, so users can have easier time which address is holding their ETH.
Appeal created
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.