First Flight #7: Horse Store

Summary

Unrestricted Minting found at HorseStore::mintHorse function

Vulnerability Details

Unrestricted Minting allows anyone to mint new horse NFTs without limitations, even same addresses without checking for uniqueness, which may cause a DoS attack due to the lack of limit on minting functionality

Impact

• Uncontrolled inflation of horse supply, devaluing existing NFTs.

Tools Used

• Manual Code Review

Recommendations

• Enforce minting restrictions: Limit minting to specific users or conditions

• Check for uniqueness of addresses trying to mint an NFT