Submission Details
Severity:
buyPresent function gives NFT to msg.sender not presentReceiver
Summary
buyPresent function mints NFT to msg.sender not presentReceiver
Vulnerability Details
As in description, a present should be for presentReceiver. But minted NFT is send to msg.sender, not presentReceiver.
Impact
buyPresent function mints NFT to msg.sender not presentReceiver
Tools Used
Foundry
Recommendations
instead of calling _mintAndIncrement function, creating another private function with parameter addressReceiver to mint NFT to.
Rewards breakdown
nSLOC
116This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.