Able to steal funds

[NickErrant]

When bounty is denominated in ether, only validation on the amount field when a bounty is created is require(_amount >= msg.value);

smart_contracts/contracts/bounty/BountyIndex.sol

Line 75 in 9100e1c

require(_amount >= msg.value);

Attacker could post bounty where _amount is greater than msg.value, but lower than the balance of the contract, then claim/approve said bounty for themselves. This would effectively steal the difference between _amount - msg.value.

Suggested fix:
When bounty is denominated in ether, set amount for that bounty equal to msg.value

[owocki]

f33510f

[owocki]

migrating contract now.

[owocki]

just sent you a tip for submitting this. thanks @NickErrant !

[NickErrant]

Received bounty payment :)