Submission Details
Severity:
Directly sending ether to the `LikeRegistry` contract would make the funds unrecoverable
Description
Since there is a receive() function in the LikeRegistry contract, a user can accidentally send ether to the contract.
Impact
This can result in the loss of user funds directly sent to the LikeRegistry contract.
Recommended Mitigation
Remove the receive() function from the LikeRegistry contract as it's not supposed to receive funds directly, just via the LikeRegistry::likeUser function which is already payable and can receive ether successfully.
- /// @notice Allows the contract to receive ETH
- receive() external payable {}
Updates
Appeal created
n0kto 9 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
invalid_receive_function
Not the best design, but if you send money accidentally, that's a user mistake. Informational.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.