Bid Beasts

First Flight #49
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Submission Details
Impact: low
Likelihood: low
Invalid

Lack of events for refunded actions

Root + Impact

Description

  • The functions withdrawAllFailedCredits do not emit refunded events.

Risk

Impact:

  • The function withdrawAllFailedCreditsallows users to withdraw their pending failed transfer credits, but it does not emit any event.

    This reduces auditability and on-chain transparency, as there is no way to track which account withdrew credits and for what amount.

    Users and off-chain services (e.g., indexers, UIs, monitoring tools) cannot easily verify or display these withdrawals.

Recommended Mitigation

Emit an event whenever credits are withdrawn, recording both the beneficiary and the withdrawn amount.

Updates

Lead Judging Commences

cryptoghost Lead Judge about 1 month ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.