Submission Details
Impact:
Likelihood:
### [M-5] Absence of receive() and fallback() function to accept direct ETH transfers.
[M-5] Absence of receive() and fallback() function to accept direct ETH transfers.
Description
The snow contract involves ETH payment for buying snow tokens.However,there is no
receive() and fallback() function to handle direct ETH transfers.This means ,if user
accidentally sends ETH to snow contract ,the transaction will fail and ETH will get lost.
Impact:
1.Loss of User Funds.
2.Poor User Experience.
3.Operational in-effienciency.
Proof of Concept
1.User sends ETH directly to the contract address using a wallet (e.g., MetaMask) without
interacting with the buySnow function.
2.The transaction reverts because the contract does not have a receive or fallback function
to accept ETH.
Recommended Mitigation
1.We can add receive function with revert statement in it.
2.This will revert to users, if ETH is sent accidentally.
receive() external payable {
revert("Use the buySnow function to purchase tokens");
}
Rewards breakdown
nSLOC
215This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.