Given how checkTwice is implemented, s_theListCheckedTwice is always equal to s_theListCheckedOnce (if the modifier is corrected).
It's not a vulnerability but raises questions about the goal of checkList and checkTwice and the double check here again. This implementation, possibly desired, excludes people who are Nice on the first check and Very Nice on the second.
Inaccurate checks by Santa may lead to Nice/Very Nice people not receiving rewards.
Manual review.
Remove
and allow people with hybrid Nice/Very Nice status to mint as Nice people.
Or
Only check s_theListCheckedTwice for readability/simplicity purposes.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.