Submission Details
Severity:
Bad Code
Summary
There is no code to transfer the NFT minted to the presentReceiver in function buyPresent.
Vulnerability Details
function buyPresent(address presentReceiver) external {
i_santaToken.burn(presentReceiver);
_mintAndIncrement();
}
There is no code for the logic mentioned in the docs. With the current logic of buyPresent function, user can only burn his/her SantaTokens and mint NFT but cannot transfer that NFT to
Impact
Due
Hence, making the contract unusable for any user or santa.
Tools Used
Manual Review
Recommendations
To mitigate the vulnerability,
Here's how you can modify the function:
Updates
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.