Submission Details
Severity:
Buying NFTs for themselfes
Summary
buyPresent can be used to buy an NFT also for NICE and EXTRA_NICE. This behaviour can be damaging for EXTRA_NICE, because if somebody is minting them a NFT they can't get the santa tokens, as when they call the collectPresent it will revert at the balance check, line 151
Vulnerability Details
Impact
Low
Tools Used
Manual
Recommendations
Buying present by NICE and EXTRA_NICE should not be possible, or it should be possible with a check that they already collected the NFT form collectPresent
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.