Submission Details
Severity:
Any third party user can overwrite the 0 couple message
Summary
Any third party user can overwrite the 0 couple message
Vulnerability Details
If the user is not has a couple, then it will default to ownerToId[msg.sender] value 0 and can rewrite the message
Impact
A couple may receive the wrong message from a third party
Tools Used
Manual review
Recommendations
Add a check for null value
Updates
Lead Judging Commences
0xnevi over 1 year ago
Submission Judgement Published Assigned finding tags:
finding-write-message-nft-0-id
Medium Severity, This has an indirect impact and influence on the possibility of divorce between soulmates owning the first soulmate NFT id0, leading to permanent loss of ability to earn airdrops/staking rewards.
Rewards breakdown
nSLOC
233This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.