Submission Details
Severity:
Everyone can claim 1 token day also if users are not in a couple in Airdrop_claimRewards
Summary
Vulnerability Details
In this function, everyone can claim tokens because the
‘soulmateOf’ of the sender is not well checked.
Impact
Users without a NFT and not in a couple can mint tokens.
Tools Used
Foundry
Recommendations
: Make sure that ‘msg.sender’ actually has a
soulmate checking for ‘Soulmate__soulmateOf(msg.sender)’.
Rewards breakdown
nSLOC
233This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.