First Flight #5: Santa's List

Summary

A contradiction between the official documentation and the Contract's commented documentation

Vulnerability Details

The documentation says that the buyPresent function can be called by anyone while in the code, it is commented that the function should only be callable by someone naughty. However, the function's call restriction follows the official documentation

Impact

This finding can lead to unexpected behavior from the contract

Tools Used

Manual Analysis

Recommendations

Consider reviewing the contract's commented documentation and the official one.