Submission Details
Impact:
Likelihood:
`Function:cancelParticipation` lacks checks for stakedAsset
[L-2] Function:cancelParticipation lacks checks for stakedAsset
Description
The cancelParticipation() function allows users to withdraw their staked assets before the event starts. However, the function does not perform sufficient checks before proceeding:
uint256 refundAmount = stakedAsset[msg.sender];
//lacks checks for stakedAsset
stakedAsset[msg.sender] = 0;
uint256 shares = balanceOf(msg.sender);
_burn(msg.sender, shares);
IERC20(asset()).safeTransfer(msg.sender, refundAmount);
Impact
A user with no deposit could still attempt to call the function, wasting gas or triggering revert unexpectedly.
Recommended mitigation
+if (stakedAsset[msg.sender] == 0) revert noDeposit();
Rewards breakdown
nSLOC
193This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.