Submission Details
Severity:
No withdraw function in EggHuntGame contract
Summary
Players can deposit eggs to EggVault from main contract EggHuntGame, but can not withdraw eggs from the main contract
(Only if they don't have access to EggVault functions)
Vulnerability Details
Impossibility of withdrawing eggs from main contract EggHuntGame
Impact
Eggs stuck in EggVault contract
Tools Used
Forge Test, Remix, Manual Review
Recommendations
Add a withdrawEggFromVault() function
/// @notice Allows the original depositor to withdraw their egg from the vault.
function withdrawEggFromVault(uint256 tokenId) external {
require(eggVault.eggDepositors(tokenId) == msg.sender, "Not the original depositor");
require(eggVault.isEggDeposited(tokenId), "Egg is not deposited");
eggVault.withdrawEgg(tokenId);
}
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.