smart_contracts
smart_contracts copied to clipboard
Frontrunner stealing bounty
If both the bounty claim, and bounty approval are in the same block a frontrunner can steal the bounty funds.
Hmm... This is an interesting theoretical attack, but I wonder how practical it is. In that, the UI won't allow a user to enter an approval until the claim is in. And also an approval isn't going to approve a claim within 10s (3s) after casper.
I agree its fairly unlikely (and impossible through the UI).
The contract also doesn't check the return value of transfers, which can return false on failure instead of throwing.