Submission Details
Impact:
Likelihood:
Missing Registration Check in claim_pizza_slice
Root + Impact
Description
claim_pizza_slice uses users_claimed_amount without confirming registration properly.
let amount = *table::borrow(&state.users_claimed_amount, user_addr); // @> may panic if not registered
Risk
Likelihood:
Unregistered users may trigger panic.
Impact:
Transaction failure, potential DoS.
Proof of Concept
// Call claim_pizza_slice without prior registration
Recommended Mitigation
+ assert!(table::contains(&state.users_claimed_amount, user_addr), E_NOT_REGISTERED);
- let amount = *table::borrow(&state.users_claimed_amount, user_addr);
+ let amount = *table::borrow(&state.users_claimed_amount, user_addr);
Rewards breakdown
nSLOC
125This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.