Hawk High

Summary

In the LevelOne contract, the graduateAndUpgrade function is designed to handle the graduation process and transition to a new contract implementation. However, it does not verify whether students have achieved the necessary cutOffScore before initiating this process.

Vulnerability Details

The graduateAndUpgrade function does not check if students have met the required cutOffScore. Students who have not achieved the necessary score can still graduate, undermining the integrity of the academic evaluation process.

Impact

Students who have not achieved the necessary score (cutoffscore)can still graduate, undermining the integrity of the academic evaluation process.

Tools Used

Manual code review

Recommendations

Implement Cutoff Score Verification: Before proceeding with graduation, iterate through the list of students and ensure each has a studentScore equal to or exceeding the cutOffScore.