mediumLogic errorEVM-Solidity
Thruster: Dynamic modification of `maxPrizeCount` affects prize claims
- Payout
- $0
- Protocol
- Thruster
- Disclosed
- Mar 28, 2024
- Source
- code4rena
ThrusterTreasure is a round-based lottery contract where the owner-controlled maxPrizeCount caps the number of prize indices that can be claimed per round. Because claimPrizesForRound() iterates prize indices up to the current, mutable value of maxPrizeCount r …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-02-thruster-findings/issues/25
- https://github.com/code-423n4/2024-02-thruster-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.