First Flight #5: Santa's List

Summary

function getNaughtyOrNiceOnce(address person) external view returns (Status) {
return s_theListCheckedOnce[person];
}

Vulnerability Details

the function returns the status of an already set address , but in cases of an address that hasnt been set it will return Nice , the default value of the status

Impact

it makes the contract vulnerable to hijackers

Tools Used

manual review

Recommendations

the default should be changes and checked for