First Flight #10: One Shot

Description

The smart contract presents a vulnerability where a malicious user can mint multiple rapper NFTs, place matching bet to ensure guaranteed wins by pitting their own NFTs against each other.

Impact

The vulnerability enables malicious users to manipulate the system, leading to unfair advantages and potential disruption of a potential leaderboard mechanism. By minting multiple rapper NFTs and orchestrating matches between them, the malicious user can perpetually secure victories, distorting the integrity of the platform.

Tools Used

Manual Review

Recommended Mitigation

Randomized Matchmaking: Introduce a randomized matchmaking system to ensure fairness and unpredictability in NFT battles, minimizing the potential for orchestrated victories.