Submission Details
Impact:
Likelihood:
Mismatch between the state variables of `LevelOne` and `LevelTwo`
Description and Impact
The LevelTwo contract, intended as the next implementation after LevelOne, does not maintain the same state variables as LevelOne .
LevelTwo has missing state variables that exist in LevelOne ( schoolFees, reviewCount, lastReviewTime ) .
When upgrading smart contracts, both the old implementation and the new implementation has to implement the state variables in the exact same way .
LevelOne
principal
inSession
schoolFees
sessionEnd
bursary
cutOffScore
isTeacher
isStudent
studentScore
reviewCount
lastReviewTime
listOfStudents
listOfTeachers
usdc
LevelTwo
principal
inSession
[MISSING] schoolFees
sessionEnd
bursary
cutOffScore
isTeacher
isStudent
studentScore
[MISSING] reviewCount
[MISSING] lastReviewTime
listOfStudents
listOfTeachers
usdc
Recommended mitigation
Respect the implementation of the state variables between LevelOne in LevelTwo to be identical .
PoC
There is no need for a PoC .
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.