Submission Details
Severity:
Unitilized Storage variable
Summary
in the src/InheritanceManager.sol contract, the address[] beneficiaries` variable isn't set to a value
Vulnerability Details
```
NFTFactory nft;
address owner;
** address[] beneficiaries;
uint256 deadline;
bool isInherited = false;
mapping(address protocol => bytes) interactions;
uint256 public constant TIMELOCK = 90 days;
Impact
A potential DOS attack which could prevent the contract from working altogether could potentially happen which is very likely as being a benefeciary is a requirement for withdrawal
Tools Used
Manual review
Recommendations
The number of beneficiaries in the address[] beneficiaries should be set to a finite number in the constructor to prevent a potential DOS attack especially when it is being looped over as it is an array
for example;
constructor() {
+ beneficiaries = 5;
owner = msg.sender;
nft = new NFTFactory(address(this));
}
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.