Submission Details
Severity:
Front-Running Vulnerability in Constructor Initialization
Vulnerability Details
The constructor initializes crucial contract elements, making it susceptible to front-running attacks.
constructor() ERC721("Merry Christmas 2023", "SANTA") {
i_santa = msg.sender;
i_santaToken = new SantaToken(address(this));
}
Impact
Exposure to Front-Running Attacks: Malicious actors could manipulate transaction order to their advantage.
Recommendations
Implement Security Checks: Add modifiers or conditions to prevent unauthorized access.
Enhanced Contract Design: Review and redesign contract initialization to minimize front-running opportunities.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.