Submission Details
Severity:
Lack of naughty status check in buyPresent function
Summary
There is no check of caller's status in buyPresent function. Anyone can call it.
Vulnerability Details
As in description, This function is only be callable by someone who is naughty. But there is no status check in this function
Impact
Anyone with any status can call buyPresent function
Tools Used
Foundry
Recommendations
adding naughty status check of msg.sender in this function
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.