Submission Details
Severity:
`_safeMint` is vulnerable to reentrancy attacks
Summary
Using _safeMint function can lead to reentrancy attacks.
Vulnerability Details
Implementation of _safeMint check _checkOnERC721Received this external call allows smart contract to implement invoked function so it can reentrant minting;
Impact
Scenario:
Attacker can create smart contract that reenter the mint function when checking if contract can receive ERC721 tokens.
This can lead to draining funds.
Tools Used
Manual Review
Recommendations
Import OpenZeppelin's ReentrancyGuard.sol and use nonReentrant modifier to protect functions that use _mintAndIncrement.
-function buyPresent(address presentReceiver) external {
+function buyPresent(address presentReceiver) external nonReentrant{
Updates
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.