Submission Details
Impact:
Likelihood:
No Check for Zero amount in buySnow()
Summary
The buySnow() function allows purchasing zero tokens, unnecessarily minting zero supply while still emitting events.
Description
If amount is set to zero, no tokens are minted but events are still emitted.
This bloats logs and may confuse indexers.
POC
function testCanBuy0SnowTokensPOC() public {
vm.prank(victory);
snow.buySnow{value:0}(0);
}
Impact
Wasted gas.
Event log pollution.
Severity
MEDIUM
Likelihood
MEDIUM
Recommendation
Add input validation:
require(amount > 0, "Cannot buy zero tokens");
Rewards breakdown
nSLOC
215This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.