Submission Details
Impact:
Likelihood:
# Missing event in `Pot::claimCut` function.
Missing event in Pot::claimCut function.
Description
When the user calls the function and collects their chat, there is no event to emit this.
function claimCut() public {
address player = msg.sender;
uint256 reward = playersToRewards[player];
if (reward <= 0) {
revert Pot__RewardNotFound();
}
playersToRewards[player] = 0;
remainingRewards -= reward;
claimants.push(player);
@> _transferReward(player, reward);
}
Risk
Each participant is calling a function and it will not be possible to track this.
Proof of Concept
Recommended Mitigation
Add a new event and play it in the function at the end.
+ event ClaimCut(address indexed player, uint256 amount);
function claimCut() public {
address player = msg.sender;
uint256 reward = playersToRewards[player];
if (reward <= 0) {
revert Pot__RewardNotFound();
}
playersToRewards[player] = 0;
remainingRewards -= reward;
claimants.push(player);
+ emit ClaimCut(player, reward);
_transferReward(player, reward);
}
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.