Submission Details
Severity:
Additional ETH sent in LikeRegistry::likeUser will be stuck in the contract
Summary
The user should send 1 ETH, while using the likeUser function. However, the function accepts ETH, which is more or equal to 1. This way a user can send more ETH, but it won't be sent back to him in any way causing a loss of funds for the user.
Impact
Medium as it causes loss of funds for the user.
Tools Used
Manual review
Recommendations
Updates
Appeal created
n0kto 6 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Users mistake, only impacting themselves.
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelihood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.