Vyper Vested Claims

First Flight #34

Beginner FriendlyDeFi

100 EXP

View results

Previous Next

Submission Details

Severity: low

Invalid

Front-running claims via permissionless claim function

hoossayn

Summary : Front-running claims via permissionless `claim` function

Vulnerability Details: Anyone can claim for any user, enabling front-running to affect transaction ordering

Impact: Low. UX issue with no direct fund loss

Tools Used: Manual code review

Recommendations: Restrict `claim` to `msg.sender` unless third-party claiming is intentional

Updates

Appeal created

bube Lead Judge 10 months ago

Submission Judgement Published

Invalidated

Reason: Design choice

Rewards breakdown

nSLOC

127

This contest has a flat reward structure with the following payouts:

High

100 EXP

Medium

20 EXP

Low

2 EXP

Live

The contest is live. Earn rewards by submitting a finding.

Judging

Submissions are being carefully reviewed by our judges.

View all submissions

Appeals

This is your time to appeal against judgements on your submissions.

Appeals Review

Appeals are being carefully reviewed by our judges.

Rewards Distribution

The contest is complete and the rewards are being distributed.