Submission Details
Impact:
Likelihood:
matchRewards consumes a user's entire aggregated balance for a single match, causing loss of funds for other pending likes.
In LikeRegistry.sol, the matchRewards function sets the userBalances of both matched users to 0 and transfers the total aggregated amount to their shared MultiSig wallet. If a user has liked multiple profiles and deposited ETH for each, their first mutual match will consume their entire balance. Subsequent matches will read a balance of 0 for this user, effectively losing the ETH they deposited for those other likes.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.