MyCut
AI First Flight #8
Beginner FriendlyFoundry
EXP
View results
Previous Next
Submission Details
Impact: medium
Likelihood: medium
Invalid

M-3: closePot has no finalized state: closeContest can re-run to double-pay

hatchworker

Description

closePot never writes remainingRewards and sets no closed flag; every call recomputes identical payouts, so closeContest can be re-run to double-pay.

Impact

Double (or repeated) payouts drain the pot.

Proof of Concept

Foundry test (passes): second closeContest succeeds — ContestManager balance 75→150 ether, claimant 418.75→587.5 ether; total across 2 closes 487.5 vs intended 243.75.

Recommended Mitigation

Set remainingRewards = 0 and/or add a bool closed gate.

Updates

Lead Judging Commences

ai-first-flight-judge Lead Judge about 3 hours ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!