Description: The _totalTurns
parameter in createGameWithEth
and createGameWithToken
determines how many rounds are played in a match. While the contract enforces that it must be a positive odd number, there is no upper limit
Impact: This could allow users to create games with an excessive number of turns (e.g., hundreds or thousands), which could lead to games with absurd turn amounts.
Recommended Mitigation: Consider imposing a reasonable upper bound on _totalTurns to maintain game simplicity
Code suggestions or observations that do not pose a direct security risk.
Code suggestions or observations that do not pose a direct security risk.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.