Submission Details
Impact:
Likelihood:
Manipulatable Passing Score System
Summary
Principal can set arbitrary cutoff scores, potentially allowing everyone to pass or fail regardless of performance.
Vulnerability Details
Root cause:
function startSession(uint256 _cutOffScore) public onlyPrincipal notYetInSession {
cutOffScore = _cutOffScore; // No bounds checking
}
Initial State:
No limits on cutoff score
Score affects student graduation
Step 1: Principal sets extremely low/high cutoff
Step 2: All students automatically pass/fail
Step 3: Academic integrity compromised
Implications:
Meaningless grading system
Devalued education quality
System manipulation
Impact
Academic integrity compromised
Unfair student assessment
Reduced educational value
Tools Used
Manual Review
Recommendations
Implement score bounds:
function startSession(uint256 _cutOffScore) public onlyPrincipal notYetInSession {
require(_cutOffScore >= 60 && _cutOffScore <= 95, "Invalid cutoff score");
// ...existing code...
}
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.