Submission Details
Impact:
Likelihood:
Unchecked Coin Registration
Root + Impact
Description
User coin registration may fail but transfer still attempted.
coin::register<AptosCoin>(user); // @> no error handling
Risk
Likelihood:
Registration can fail for uninitialized accounts.
Impact:
Claim transaction aborts unexpectedly.
Proof of Concept
// Claim_pizza_slice with unregistered user
Recommended Mitigation
- coin::register<AptosCoin>(user);
+ if (!coin::is_account_registered<AptosCoin>(user_addr)) { coin::register<AptosCoin>(user); }
Rewards breakdown
nSLOC
125This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.