DatingDapp
First Flight #33
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Previous Next
Submission Details
Severity: high
Valid

Money Deposited in Contract is Getting Locked and cant be withdrawn

0xzulkefal

Summary
Funds deposited by users are becoming inaccessible due to a flaw in the contract's withdrawal mechanism. Both users and the platform owner are unable to retrieve the locked funds.

Vulnerability Details
The withdrawal process relies on the totalFee variable, which is calculated based on userBalances. However, since userBalances is never updated upon deposit, it always returns zero. As a result:

  • totalFee remains zero.

  • The contract does not allow withdrawals.

  • Deposited funds remain permanently locked.

Impact
Users cannot access their funds for their first date.

  • The platform owner is unable to withdraw accumulated fees.

  • The contract becomes non-functional in terms of fund distribution.

Updates

Appeal created

n0kto Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding_likeUser_no_userBalances_updated

Likelihood: High, always. Impact: High, loss of funds

n0kto Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding_likeUser_no_userBalances_updated

Likelihood: High, always. Impact: High, loss of funds

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.