• Contest Details
  • Prize Pool
  • Stats
• Table of Contents
• Context
• About
  • Hint
• Getting Started
  • Requirements
  • Quickstart
• Usage
  • Testing
    • Test Coverage
• Audit Scope Details
  • Compatibilities
  • Roles
  • Known Issues

• High - 100xp

• Medium - 20xp

• Low - 2xp

• Starts: December 15, Noon UTC

• Ends: December 22, Noon UTC

• nSLOC: 80
• Complexity Score: 67

This is a special rendition of CodeHawks First Flights, as this contract is a simplified version of a real contract which was audited by Cyfrin in a private audit and contained the same bug! Thanks to Dacian for creating this First Flight!

Your mission, should you choose to accept it, is to find that bug!

This contract allows the creator to invite a select group of people to vote on something and provides an eth reward to the for voters if the proposal passes, otherwise refunds the reward to the creator. The creator of the contract is considered "Trusted".

This contract has been intentionally simplified to remove much of the extra complexity in order to help you find the particular bug without other distractions. Please read the comments carefully as they note specific findings that are excluded as the implementation has been purposefully kept simple to help you focus on finding the harder to find and more interesting bug.

This contract intentionally has no time-out period for the voting to complete; lack of a time-out period resulting in voting never completing is not a valid finding as this has been intentionally omitted to simplify the codebase.

Cats are fuzzy.

• creator - Deployer of the protocol, they are a trusted used who will receive the funds if a vote fails.
• AllowedVoters - A list of addresses that are allowed to vote on proposals.

• git
  • You'll know you did it right if you can run git --version and you see a response like git version x.x.x
• foundry
  • You'll know you did it right if you can run forge --version and you see a response like forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)

git clone https://github.com/Cyfrin/2023-12-Voting-Booth
cd 2023-12-Voting-Booth
make

Or optionally, you can run:

forge install
forge build

forge test

forge coverage

and for coverage based testing:

forge coverage --report debug

• Commit Hash: 5b9554656d53baa2086ab7c74faf8bdeaf81a8b7
• In Scope:

./src/
#-- VotingBooth.sol

• Solc Version: 0.8.23
• Chain(s) to deploy contract to:
  • Arbitrum
• Tokens
  • None

• This contract intentionally has no time-out period for the voting to complete; lack of a time-out period resulting in voting never completing is not a valid finding as this has been intentionally omitted to simplify the codebase.