complete
bytecode
findings
Bytecode-only review found a concrete reentrancy surface in the payout loop of the embedded child contract, unchecked low-level ETH sends that can silently skip payouts, and a privileged destroy/migrate path in the outer...
Top findings
-
high
Reentrant payout loop can recurse into finalization and sweep remaining funds
-
medium
Unchecked low-level ETH sends can permanently skip payouts
-
medium
Privileged destroy/migrate path can replace the live contract by creating a child and selfdestructing