Submission Details
Severity:
Lack of Verification for SantaTokens Possession in the buyPresent function
Summary
The contract's buyPresent function lacks the required verification to ensure that only users with SantaTokens can purchase presents for others,
Vulnerability Details
the function allows transfer of presents even without checking that users has presents, this means that some users may transfer what they dont have
Impact
High the function is Allowing anyone to buy presents without possessing SantaTokens
Tools Used
manual analysis
Recommendations
add a check to ensure that users posses santa tokens before they can buy others presents them
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.