Submission Details
Impact:
Likelihood:
Bug Premature executed Flag Causes Permanent Transaction Lock in MultiSigTimelock.sol
Author Revealed upon completion
Root + Impact
Description
executed = trueis set before the external call.If the call fails, the transaction is permanently marked executed.
Funds become stuck without recovery.
txn.executed = true; // @>
(bool success,) = payable(txn.to).call{value: txn.value}(txn.data);
if (!success) revert MultiSigTimelock__ExecutionFailed();
Risk
Likelihood:
Recipient reverts
Gas griefing
Malformed calldata
Impact:
Transaction becomes unexecutable forever
Locked ETH
PoC
contract Reverter {
fallback() external payable {
revert();
}
}
Mitigation
❌ Remove
txn.executed = true;
✅ Add (after successful call)
(bool success,) = ...
require(success);
txn.executed = true;
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.