Submission Details
Severity:
`recordVote` function can cause off-chain problems
Likelihood
High
Impact
Very Low (Just the wrong data shown on frontend)
Description
The recordVote is used to "Vote" for the user in veRAACToken.sol, but any user can call the function can cause the event to be emitted causing differences on chain and frontend ( / Backend ) .
Mitigation =>
Complete Removal of Function, because the main functionality for this is present in `Governance.sol`
Updates
Lead Judging Commences
inallhonesty 6 months ago
Submission Judgement Published Assigned finding tags:
veRAACToken::recordVote lacks access control, allowing anyone to emit fake events
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.