If a user with no SantaTokens tries to buy a present, the burn function triggers an underflow.
A user with SantaTokens tries to buy someone with no SantaTokens a present, the receiver address is used for the burn function and also causes and underflow.
User with no tokens can call buyPresent function and cause the contract to underflow.
User with tokens should not be able to burn the tokens of a presentReceiver.
Unnecessary execution failure, and no way to buy a present for anyone other than someone Extra_Nice can buy one for themselves.
Foundry
Require user to have an adequate balance of SantaToken to buyPresent, else revert. The user should buy the present and transfer it to the presentReciever.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.