Submission Details
Severity:
Arbitrary Token Approvals
Summary: Contract can be tricked into approving malicious tokens.
Details: The contract blindly approves token transfers without validating token addresses, allowing attackers to trick it into approving malicious tokens.
Impact: Could lead to theft of legitimate tokens through malicious approval exploits.
Recommendation: Whitelist allowed token contracts:
Updates
Appeal created
m3dython 7 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Broken Token Game Creation
createGameWithToken and joinGameWithToken functions will revert because they attempt transferFrom without requiring the user to first approve
Rewards breakdown
nSLOC
349This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.