First Flight #5: Santa's List

First Flight #5

Beginner FriendlyFoundry

100 EXP

Submission Details

Severity: high

Valid

Wrong use of `balanceOf` allows users to collect more than 1 NFT

Updates

inallhonesty Lead Judge over 1 year ago

Submission Judgement Published

Validated

Assigned finding tags:

Relying on balanceOf > 0 in collectPresent() allows the msg.sender to send their present to another address and then collect again.

nSLOC

116

This contest has a flat reward structure with the following payouts:

High

100 EXP

Medium

20 EXP

Low

2 EXP

The contest is live. Earn rewards by submitting a finding.

Submissions are being carefully reviewed by our judges.

This is your time to appeal against judgements on your submissions.

Appeals are being carefully reviewed by our judges.

The contest is complete and the rewards are being distributed.

Support

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.