Submitted by KupiaSec, also found by burnerelu, gajiknownnothing, Decap, Rhaydden, p0wd3r, 0x3b, samuraii77, peanuts, DemoreX, Abdessamed, desaperh, jesjupyter, franfran20, vinica_boy, 0xvd, amaron, slvDev, Joshuajee, cozymfer, phoenixV110, gkrastenov, ilchovski (1, 2), 0xrex, Kalogerone, ke1caM, shaflow2, shaka, dimulski, and hl_
NFT owners may receive significantly less nuke funds than they expected.
In the nuke() function, there is no minimum claim amount check. Consider the following scenario:
If Alices transaction had been processed before Bobs, she would have received 5 ETH. However, due to being front-run by Bob, she only receives 2.5 ETH, which is significantly less than expected. This highlights the necessity of implementing a minimum claim amount check in the nuke() function. With such a check, it is possible to prevent Alice from receiving only 2.5 ETH which is far below her expectations.
It is recommended to implement a minimum claim amount check in the nuke() function.
TForge1 (TraitForge) confirmed and commented:
Koolex (judge) increased severity to High and commented:
ABAIKUNANBAEV (warden) commented:
Abdessamed (warden) commented:
ABAIKUNANBAEV (warden) commented:
dimulski (warden) commented:
ABAIKUNANBAEV (warden) commented:
Koolex (judge) decreased severity to Medium and commented:
