ZhangZhuoSJTU/Web3Bugs

Adding bugs for 2022-12-forgeries

ZhangZhuoSJTU opened this issue 2 years ago · 1 comments

ZhangZhuoSJTU commented 2 years ago

Adding newly disclosed code4rena contest bugs.

Contest

Contract: Forgeries

Contract Code: https://github.com/code-423n4/2022-12-forgeries

Number of High Risk Findings: 2

Number of Wardens: 83

Bugs

[H-01] Admin does not have to wait to call lastResortTimelockOwnerClaimNFT() - O1
[H-02] Draw organizer can rig the draw to favor certain participants such as their own account. - SC

ZhangZhuoSJTU commented 2 years ago

Classifying H-02 seems to be tricky.

Will work on that later.