Submission Details
Severity:
Different id being used for mappings and minted token
Summary
Several variables are set to a different id from the one being use by the mint function.
Vulnerability Details
Mappings idToOwners, ownerToId, idToOwners and idToCreationTimestamp use the currentvalue of nextID while the _mint() method is passed nextId + 1.
Impact
Medium. This will create confusion between the ERC721 token minted for the user and the internal variables used for tracking its state.
Tools Used
Manual analysis.
Recommendations.
Change the variable passed to the mint function.
- _mint(msg.sender, nextID++);
+ _mint(msg.sender, nextID);
+ nextID++;
Rewards breakdown
nSLOC
233This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.