15

Yesterday, I put a 100-rep bounty on an answer in order to give association bonus and network flair rights to our newly-appointed community manager, Cesar M.

While awarding the bounty, I clicked the button, then clicked OK on the dialog. The page refreshed, but nothing appeared to have happened. I tried again, clicked through the dialog, and it appeared as if the bounty was awarded.

I then saw something weird: my name was showing up twice on the bounty tooltip, despite my only having started one bounty. Also, Cesar's reputation page shows two separate +100 bounty gains within seconds, each corresponding to the same bounty, and the revision history of that answer shows two "bounty ended" events. Finally, weirdly, the bounty icon on the answer itself only shows +100 instead of the actual award of +200. Effectively, I was able to award the same bounty twice to the same user by (unintentionally) exploiting a race condition.

Can there be some extra checking to make sure that the bounty isn't awarded twice, so that one can't intentionally exploit this race condition? Can we also delete extraneous bounty votes corresponding to when this race condition was exploited, both intentionally and unintentionally?


Update: With the help of rene, I found that, while this situation of a double-bounty is rare, it has occurred on occasion fairly often (around once a year on average for the past few years). In particular, this has occurred a total of nine times (four times on Stack Overflow, twice on Mathematics, and once each on Worldbuilding, Mi Yodeya, and Board & Card Games - that last one was my instance). There might be other instances where the same bounty was awarded to multiple answers (i.e. after nothing appeared to have happened on the first attempt, the bounty owner selected a different answer to award it), but as the system doesn't keep track of what bounty vote corresponds to what actual bounty, that can't be queried for.

I still think that the overarching bug should be fixed, as this might be exploitable by users, based on what happened with me and how my instance occurred. In the meantime, can we please at least delete these nine erroneous bounty votes, leaving these answers with just one bounty award?

13

After further checking what happened, it appears that what you noticed is correct - it indeed counted twice for my rep (+200) whilst removing only 100 rep from you.

At this time I cannot explain what caused it to happen, but we will investigate further and I will edit this once we have more details.

Just wanted to clarify one thing: from your report, it's not clear what causes it to not show up the first time once the page was refreshed, so it isn't possible to 100% reproduce that every time, correct?

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .