Submission Details
Severity:
Missing time validation in constructor
Summary
There is no validation in checking that vesting_start_time < vesting_end_time
Impact
vesting_start_time could be larger than vesting_end_time which breaks the vesting time assumption.
Recommendations
diff --git a/src/VestedAirdrop.vy b/src/VestedAirdrop.vy
index 5b00ff7..a73921e 100644
--- a/src/VestedAirdrop.vy
+++ b/src/VestedAirdrop.vy
def __init__(merkle_root: bytes32, token: address, vesting_start_time: uint256,
@param vesting_start_time: uint256, the start time of the vesting
@param vesting_end_time: uint256, the end time of the vesting
"""
+ assert vesting_start_time < vesting_end_time
self.merkle_root = merkle_root
self.token = token
self.vesting_start_time = vesting_start_time
Rewards breakdown
nSLOC
127This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.