Hawk High

First Flight #39
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Impact: medium
Likelihood: high
Invalid

Teachers are paid more on LevelTwo.

Summary

Teachers receive 40% of the school fee pot instead of 35%.

Vulnerability Details

The invariant says:

Payment structure is as follows:

  • principal gets 5% of bursary

  • teachers share of 35% of bursary

  • remaining 60% should reflect in the bursary after upgrade

However, as we can see in LevelTwo.sol:

uint256 public constant TEACHER_WAGE_L2 = 40;

That means that teachers get more funds than intended.

Impact

Teachers are overpaid, and the school receives a smaller share.

Tools Used

Manual Review

Recommendations

Update TEACHER_WAGE_L2 to 35.

Updates

Lead Judging Commences

yeahchibyke Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.