Munchables - Beosin's results

A web3 point farming game in which Keepers nurture creatures to help them evolve, deploying strategies to earn them rewards in competition with other players.

General Information

Platform: Code4rena

Start Date: 22/05/2024

Pot Size: $20,000 USDC

Total HM: 6

Participants: 126

Period: 5 days

Judge: 0xsomeone

Total Solo HM: 1

Id: 379

League: ETH

Munchables

Findings Distribution

Researcher Performance

Rank: 114/126

Findings: 1

Award: $0.01

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2024-05-munchables/blob/main/src/managers/LockManager.sol#L194

Vulnerability details

In the contract's approveUSDPrice function, in order to prevent repeated voting, the caller needs to be checked accordingly. However, the approveUSDPrice function only checks that the caller has not voted for it, but not whether it has voted against it. This leads to the possibility that the user first votes against the proposal and then votes in favor, then he will be able to vote twice for the same proposal

Assessed type

Invalid Validation

#0 - c4-judge

2024-06-05T12:42:47Z

alex-ppg marked the issue as satisfactory

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter