Root Cause: The claimCut function has no timestamp validation.
Line 32-40 shows no deadline check.
@> function claimCut() public {
@> // No deadline check
@> }
Impact: Users can claim rewards even after 90-day closing period.
Proof of Concept:
Pot created at timestamp T
90 days pass
Owner calls closePot to redistribute
User still calls claimCut and claims reward
Recommended Mitigation: Add deadline check to claimCut.
The contest is live. Earn rewards by submitting a finding.
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsThe contest is complete and the rewards are being distributed.