First Flight #4: Boss Bridge

Summary

TokenFactory does not check if a token with a specific symbol already exists, leading to inconsistencies in getTokenAddressFromSymbol.

Vulnerability Details

TokenFactory can generate tokens with the same symbol, storing them in its s_tokenToAddress mapping without verifying tokens created previously. This makes getTokenAddressFromSymbol ambiguous and problematic, especially if used in critical functions.

Impact

It is confusing and can potentially lead to issues in critical functions.

Tools Used

VSCode

Recommendations

Prevent the creation of two tokens with the same symbol to maintain consistency and avoid issues with critical functions.