First Flight #9: Soulmate

Summary

Users' normal mint/claim behaviour can be blocked by hackers.

Vulnerability Details

• Alice mints soulmate token and waits for one soulmate.

• Bob monitors this and mint soulmate token by frontrun, so Alice and Bob are reunited.

• Bob gets divorced.

• Alice cannot claim any rewards.

Impact

Malicious soulmate can get divorce with you, you cannot get any rewards.

Tools Used

Manual

Recommendations

Maybe more mechanisms need to be introduced in this project. For example, if Bob wants to become soulmate with Alice, Alice has the right to say yes or no.