complete
bytecode
findings
Bytecode-only review found a confirmed public timeout/destruction path and multiple unchecked ETH-transfer callsites. The strongest issue is that payout loops ignore CALL success and then mark entries as processed, which...
Top findings
-
high
Unchecked ETH payouts can mark participants paid even when the transfer fails
-
medium
Public timeout path can selfdestruct the contract and sweep leftovers to a hardcoded address
-
medium
Timeout payout loop calls out before clearing the current entry