Judge has assessed an item in Issue #21 as 2 risk. The relevant finding follows:
[L-01] setMaxPrizeCount may result in a user can’t claim the prize
Proof of Concept
When claiming the prize, it will loop through maxPrizeCount to see if there is any match. However, setMaxPrizeCount() can be updated arbitrarily, assuming the previous maxPrizeCount is 3, and a user hasn’t claimed the prize for prizeIndex 2 yet, if the maxPrizeCount is set to 2, the user can’t claim the prize because the prize will not be looped to.
Judge has assessed an item in Issue #21 as 2 risk. The relevant finding follows:
[L-01] setMaxPrizeCount may result in a user can’t claim the prize Proof of Concept When claiming the prize, it will loop through maxPrizeCount to see if there is any match. However, setMaxPrizeCount() can be updated arbitrarily, assuming the previous maxPrizeCount is 3, and a user hasn’t claimed the prize for prizeIndex 2 yet, if the maxPrizeCount is set to 2, the user can’t claim the prize because the prize will not be looped to.