First Flight #10: One Shot

Beginner FriendlyFoundryNFT
100 EXP
Submission Details
Severity: high
Valid

The `RapBattle::goOnStageOrBattle` function is missing check for the `_tokenId` provided actually owned by the `msg.sender`, making its possible for challenger to use any Rapper NFT

Updates

Lead Judging Commences

inallhonesty Lead Judge 9 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Challenger can use any nft to battle - not necessarily theirs

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources