Hawk High

First Flight #39
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Impact: medium
Likelihood: medium
Invalid

No Criteria for Expulsion

Summary
The expel function allows the principal to expel any student without justification

Vulnerability Details
Root Cause: The expel function does not enforce any conditions for expulsion:

isStudent[_student] = false;

Initial State: A student is enrolled.

Step 1: The principal calls expel for any student.

Outcome: The student is expelled without any stated reason.

Implications: This gives the principal unchecked power, which could lead to abuse.

Impact
Who is affected: Students.

How they are affected: Students could be unfairly expelled without justification.

Tools Used
manuel review

Recommendations
Add conditions for expulsion, such as low scores or rule violations:

require(studentScore[_student] < MINIMUM_SCORE, "Student score is sufficient");

Updates

Lead Judging Commences

yeahchibyke Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.