Submission Details
Severity:
Signature Malleability in Token Transfers
Summary: Missing nonce validation in token transfers allows replay attacks.
Details: The joinGameWithToken() and other token functions don't validate transfer nonces, allowing malicious users to replay token transfers.
Impact: Could result in duplicate token transfers and game state corruption.
Recommendation: Add nonce tracking:
Rewards breakdown
nSLOC
349This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.