Submission Details
Severity:
Santalist.buyPresent's comment does not match the code.
Summary
Santalist.buyPresent comment does not match the code.
Vulnerability Details
The comment says that the caller can buy a present for someone else (presentReceiver). But the code allows the user to buy present for himself
by burning the presentReceiver token.
Also, according to the comment, the function can only be called by someone who is naughty. But there is no check for that.
Impact
Mislead users.
Tools Used
Manual review.
Recommendations
Rewrite the comment to match the code.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.