Submission Details
Severity:
[H-2] No Session Check on LevelOne::giveReview() function
Description:
There's no session checks for the giveReview() functions at LevelOne.sol which could allow a teacher to gives review to a students when its not a study session.
Impact:
Teacher can give reviews to a students outside study session.
Tools used:
Manual review
Remediation:
Add notYetInSession modifier
- function giveReview(address _student, bool review) public onlyTeacher {
+ function giveReview(address _student, bool review) public onlyTeacher notYetInSession {
Updates
Lead Judging Commences
yeahchibyke 6 months ago
Submission Judgement Published Assigned finding tags:
session state not updated
`inSession` not updated after during upgrade
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.