Payouts
Top 25
Top 50
All
Code4rena
May '24
Feb '24
high
Malicious user can stake an amount which causes zero curStakeAtRisk on a loss but equal rewardPoints to a fair user on a win
high
FighterFarm:: reroll won't work for nft id greator than 255 due to input limited to uint8
medium
NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered(steal protocol's token)