Snowman Merkle Airdrop
AI First Flight #10
Beginner FriendlyFoundrySolidityNFT
EXP
View results
Previous Next
Submission Details
Impact: high
Likelihood: high
Invalid

The buySnow function does not refund incorrect msg.value amounts, leading to loss of user funds

plarochkin

In the buySnow function, if msg.value is provided but does not exactly equal s_buyFee * amount, the execution falls into the else block. The contract then transfers WETH from the user to cover the fee, but it fails to refund the originally sent ETH. This results in the user's ETH being taken by the contract in addition to the WETH fee, leading to a loss of funds for the user.

Updates

Lead Judging Commences

ai-first-flight-judge Lead Judge 4 days ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!