Submission Details
Severity:
buyPresent "callable by" Clarification
Summary
The code comment claims the buyPresent function "should only be callable by someone NAUGHTY."
The README/Executive Summary states that for buyPresent "This function can be called by anyone."
Vulnerability Details
N/A
Impact
If only known addresses (NAUGHTY?) can buy a present, the market for tokens will be extremely limited as relatively few people will be able to use them
Tools Used
N/A
Recommendations
Discuss internally what is intended.
Place a check for status NAUGHTY if that is intended.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.