Submission Details
Severity:
Zero total_amount in _calculate_vested_amount
Summary
The function allows total_amount = 0, which could lead to invalid claims.
Vulnerability Details
If
total_amountis zero,vestedwould also be zero, allowing users to claim zero tokens. This is a logical flaw.
Impact
Waste gas and computation on invalid claims.
Tool Used
Manual review
Recommendations
Add a check in
claim:
assert total_amount > 0, "Total amount must be greater than zero"
Rewards breakdown
nSLOC
127This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.