Vyper Vested Claims

First Flight #34
Beginner FriendlyDeFi
100 EXP
View results
Submission Details
Severity: low
Invalid

token and owner Should Be Immutable in VestedAirdrop

Summary

The token and owner variables are declared as mutable but are set only during deployment.

Vulnerability Details

  • Mutable token and owner waste gas and allow unintended modifications if not properly restricted.

  • These variables should be immutable to save gas and enforce immutability.

token: public(address) # Should be immutable
owner: public(address) # Should be immutable

Impact

  • Increased gas costs and potential security risks if variables are accidentally modified.

Recommendations

  • Declare token and owner as immutable:

TOKEN: public(immutable(address))
OWNER: public(immutable(address))
  • Initialize them in the constructor:

TOKEN = token
OWNER = msg.sender
Updates

Appeal created

bube Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.