Root + Impact

Description

• Admin queues team in the country/team array, user/players select country of their choice, admin selects a winning country using the id(index),winners go and claim rewards.

• The issue here is that there are no checks to prevent duplicate entries when user adds countries to the team array, an admin can mistakenly add a duplicate entry, and since there's no function to change that, the team persists, and when users make their bet, they use an id, a user/users with a wrong id can still share winnings if the country that was set as the winner, is a duplicate, and they choose the dupicate id

Risk

Likelihood:

• When admin adds a duplicate country in the team array

Impact:

• Disproportional/unfair distribution of shares to participants

Proof of Concept

Recommended Mitigation