Submission Details
Impact:
Likelihood:
Incorrect Review Count Limit Check
Summary
The giveReview function in LevelOne.sol has an incorrect review count limit check that allows students to receive more reviews than intended.
Vulnerability Details
Current check:
require(reviewCount[_student] < 5, "Student review count exceeded!!!");
This allows a student to receive a 5th review when they already have 4
The check should be reviewCount[_student] < 4 to limit to exactly 4 reviews
Impact
Medium: This vulnerability:
Allows students to receive more reviews than intended
Breaks the intended review limit system
Could lead to unfair student evaluations
Tools Used
Manual code review
Recommendations
Fix the review count check:
require(reviewCount[_student] < 4, "Student review count exceeded!!!");
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.