Submission Details
Severity:
Faulty Token Balance Check in `collectPresent` Function
Vulnerability Details
The collectPresent function incorrectly checks the Ethereum (ETH) balance of msg.sender instead of their specific token balance.
if (balanceOf(msg.sender) > 0) { //@audit wrong balance check
revert SantasList__AlreadyCollected();
}
Impact
Incorrect Validation: Addresses with zero tokens but a non-zero ETH balance are unjustly prevented from collecting presents.
Token Collection Issue: Legitimate token holders may be erroneously barred from collecting their due presents.
Recommendations
Correct Balance Check: Modify the check to validate the specific token balance of msg.sender.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.