Submission Details
Severity:
SantaList default value is NICE
Summary
NICE is the first value in the status enum
Vulnerability Details
If the address is never checked by Santa, the user will be able to collect a present.
Impact
Users can mint NFT's without being checked.
Tools Used
Foundry/Remix
Recommendations
Reorder the enum so NOT_CHECKED_TWICE is the first value, or any value other than those able to claim NFT.
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
default status is nice
In Solidity the first element of an enum is the default value. In Santa's List, the means each person is mapped by default to 'NICE'.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.