Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Invalid

Buying presents with another address funds

Summary

buyPresent burns the token of an address transmitted as a param and the minted nft goes to the msg.sender

Vulnerability Details

Impact

High

Tools Used

Manual

Recommendations

Burn tokens from msg.sender

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Too generic

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.