The smart contract is susceptible to a potential "rug pull" scenario, as the owner has unrestricted ability to mint tokens without any defined limit.
The mint
function lacks proper constraints on the total supply, allowing the owner to mint an arbitrary amount of tokens without limitations.
The absence of a minting limit exposes the contract to a severe risk of a "rug pull," where the owner can create an excessive token supply at their discretion, undermining the trust and value of the token.
Manual code review.
Implement a strict maximum minting limit in the mint
function to prevent the owner from executing a potential "rug pull" scenario.
function mint(address account, uint256 amount) external onlyOwner {
require(totalSupply() + amount <= MAX_MINT_LIMIT, "Exceeds mint limit");
_mint(account, amount);
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.