Submission Details
Impact:
Likelihood:
The setFestivalContract function lacks a zero-address check and prevents future upgrades.
The setFestivalContract function requires festivalContract == address(0), meaning it can only be called once. It does not validate that the incoming _festival address is non-zero. If a wrong non-zero address is passed, the contract is permanently locked. Furthermore, this prevents any future upgrades to the festival contract if a bug is found or new features are needed.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.