Hawk High
First Flight #39
Beginner FriendlySolidity
100 EXP
View results
Previous Next
Submission Details
Impact: low
Likelihood: low
Invalid

Poorly Descriptive Event Names (Observability Gaps)

proofofexploit

Events such as Enrolled, TeacherAdded, TeacherRemoved, and SchoolInSession emit only an address or a single isolated parameter, omitting essential context:

  • Enrolled does not include the amount paid or the token address.

  • SchoolInSession does not emit the cutOffScore.

  • TeacherAdded/TeacherRemoved lack proper indexed parameters.

Impact:

  • On-chain traceability suffers: back-ends and analytics systems must issue extra read calls to reconstruct context.

  • Higher indexing costs on platforms like The Graph.

  • Complicates external audits and debugging.

Recommended Mitigation:

Add relevant fields and use indexed, for example:

event Enrolled(
address indexed student,
uint256 amountPaid,
address token,
uint256 timestamp
);
event SchoolInSession(
uint256 start,
uint256 end,
uint256 cutOffScore
);
​
Always include block.timestamp when it adds value.
​
​
​
Updates

Lead Judging Commences

yeahchibyke Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!