Missing cutOffScore Check in graduateAndUpgrade
Summary
Missing cutOffScore check allows failing students to persist post-upgrade.
Vulnerability Details
The graduateAndUpgrade function in LevelOne.sol does not check studentScore against cutOffScore for each student, allowing students who fail to meet the cutOffScore to remain in the listOfStudents post-upgrade, violating the invariant that failing students should not be upgraded.
Impact
Incorrect student progression, potentially affecting future sessions.
Tools Used
Manual code review.
Recommendations
Add a loop in graduateAndUpgrade to check studentScore[student] >= cutOffScore and remove failing students from listOfStudents.ons
Lead Judging Commences
cut-off criteria not applied
All students are graduated when the graduation function is called as the cut-off criteria is not applied.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.