Platform: Code4rena
Start Date: 27/01/2022
Pot Size: $75,000 USDT
Total HM: 6
Participants: 29
Period: 7 days
Judge: leastwood
Total Solo HM: 6
Id: 72
League: ETH
Rank: 14/29
Findings: 1
Award: $439.45
🌟 Selected for report: 1
🚀 Solo Findings: 0
439.4531 USDT - $439.45
samruna
In the above code, there is no check to see if endTime is before startTime. Due to this past beneficiaries can be transferred additional tokens
Action: check if endTime if always in future.
#0 - ColaM12
2022-02-02T06:20:00Z
EndTime is set in the constructor. Recommend severity 0(Non-critical)
#1 - 0xleastwood
2022-02-14T23:20:51Z
While it isn't expected that the deployer account will intentionally set endTime
before startTime
, I agree that there should be such a check. Although, it isn't clear how this might lead to loss of funds, therefore I'll mark this issue as 1(Low Risk)
.