First Flight #10: One Shot

Summary

Anyone can mint a high amount of rappers, stake them for days, and get a lot of CredToken, so the real incentive of fighting and beting for doubling the amount of tokens makes no sense.

Vulnerability Details

There is no incentive to fight and risk tokens. Anyone can simply mint a lot of NFTs and stake them for days to get a lot of CredTokens.

Impact

Value of CredToken at risk since anyone can have a really high amount of tokens for cheap (only paying the gas for minting and staking).

Tools Used

Manual review

Recommendations

Add a check when minting, and allow a certain amount of NFTs per user, or only allow users to mint NFTs if a certain condition is met