Summary

The MINT_HORSE() function lacks input validation, which may result in unexpected behavior or exploitation. Input validation is essential to ensure that only valid inputs are processed. The provided proof of concept suggests the addition of input validation logic to enhance the security of the smart contract.

Impact

The absence of input validation in the MINT_HORSE() function can lead to various issues, including potential exploitation. Without proper validation, the function might process invalid or malicious inputs, causing unintended behavior and compromising the integrity of the contract.

Vulnerability Details

Proof of Concept

Tools Used

• Manual code analysis

Recommendations

To address the lack of input validation, the following recommendation is provided:

1. Input Validation Logic:
   Insert input validation logic at the beginning of the MINT_HORSE() function to ensure that only valid inputs are processed. For example, check if msg.sender is a valid address. If the validation fails, revert the transaction or take suitable action.