The LikeRegistry
current implementation has a receive() external payable {}
which lets an arbitary user send ETH directly to this contract. This just causes the sent ETH to be locked in the contract forever. If someone accidentally calls the contract with ETH that leads to permanent loss of funds. This function has no use case in the current logic of LikeRegistry
so its advisable to just remove the function to avoid such accidents.
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelihood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.