Submission Details
Severity:
Incorrect amount send to beneficiaries when buyOutEstateNFT is called
Vulnerability Details
-
The Vulnerability is in this line.
-
To calculate the amount, that we need to send to other beneficiaries, we divide finalAmount by divisor. This is incorrect we have to divide finalAmount by multiplier instead.
Impact
Beneficiaries will get less amount than the amuont they deserve and part of the finalAmount which was not to them will be stuck in the contract.
Tools Used
Manual Review
Recommendations
--- IERC20(assetToPay).safeTransfer(beneficiaries[i], finalAmount / divisor);
+++ IERC20(assetToPay).safeTransfer(beneficiaries[i], finalAmount / multiplier);
Updates
Lead Judging Commences
0xtimefliez 5 months ago
Submission Judgement Published Assigned finding tags:
buyOutNFT has wrong denominator
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.