Submission Details
Severity:
ETH sent to LikeRegistry::receive will be forever stuck
Summary
The LikeRegistry contract has a receive function making it eligible to receive ETH directly and not only from the likeUser function. However, there is no way to ever retrieve this ETH back resulting in forever stuck funds in the contract.
Impact
Medium as it causes loss of funds.
Tools Used
Manual Review
Recommendations
Remove the receive function
Updates
Appeal created
n0kto 6 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
invalid_receive_function
Not the best design, but if you send money accidentally, that's a user mistake. Informational.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.