Submission Details
Impact:
Likelihood:
Missing Events for Critical State Changes
Root + Impact
Description
The public functions burnFaucetTokens and adjustDailyClaimLimit perform critical state-changing operations but fail to emit corresponding events.
function burnFaucetTokens(uint256 amountToBurn) public onlyOwner {
...
// @> no event is emitted
}
function adjustDailyClaimLimit(uint256 by, bool increaseClaimLimit) public onlyOwner {
...
// @> no event is emitted
}
Risk: Informational
Likelihood: Low
Admin functions only called by the owner
Impact: Low
No direct loss of funds or logic error, but reduces contract transparency and auditability.
Proof of Concept
Recommended Mitigation
Emit clear and descriptive events after critical state changes:
event FaucetTokensBurned(address indexed owner, uint256 amount);event DailyClaimLimitAdjusted(uint256 oldLimit, uint256 newLimit, bool increased);
function burnFaucetTokens(uint256 amountToBurn) public onlyOwner {
...
+ emit FaucetTokensBurned(msg.sender, amountToBurn);
}
function adjustDailyClaimLimit(uint256 by, bool increaseClaimLimit) public onlyOwner {
...
+ emit DailyClaimLimitAdjusted(oldLimit, dailyClaimLimit, increaseClaimLimit);
}
Rewards breakdown
nSLOC
157This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.