Submission Details
Impact:
Likelihood:
Missing Event in cancelParticipation()
Root + Impact
Description
Normal Behavior:
State-changing functions should emit events for off-chain monitoring and transparency.
Issue:
The
cancelParticipation()function at burns shares and refunds assets but does not emit an event to signal the cancellation.
Risk
Likelihood:
Every time a user cancels participation before the event starts.
Impact:
-
No on-chain record of cancellations
-
Off-chain systems cannot track participant withdrawals
-
Difficult to audit historical cancellations
Recommended Mitigation
function cancelParticipation () public {
if (block.timestamp >= eventStartDate){
revert eventStarted();
}
uint256 refundAmount = stakedAsset[msg.sender];
stakedAsset[msg.sender] = 0;
uint256 shares = balanceOf(msg.sender);
_burn(msg.sender, shares);
IERC20(asset()).safeTransfer(msg.sender, refundAmount);
+ emit ParticipationCancelled(msg.sender, refundAmount, shares);
}
Rewards breakdown
nSLOC
193This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.