Submission Details
Severity:
[L-01] Game Cancellation Griefing Vulnerability
Summary
The cancelGame() function allows Player A to cancel games after Player B joins without penalty, enabling systematic wasting of Player B's time and gas costs despite token refunds.
Vulnerability Details
Player A retains cancellation rights until first move commitment
Player B's join transaction costs gas irrecoverably
Impact
Discourages honest participation
Systematic time/gas waste
Tools Used
Manual code review
Recommendations
1) Cancellation Penalty (Recommended)
2) Time-Locked Cancellation
Rewards breakdown
nSLOC
349This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.