Anyone can update soulmateId 0's message
Summary
Anyone can update soulmateId 0's message
Vulnerability Details
Alice does not have soulmate.
Alice tries to update soulmateId 0's message by calling writeMessageInSharedSpace(). System thinks Alice's soulmateId is 0 and update soulmateId 0's message.
Impact
Anyone can update soulmateId 0's message
Tools Used
Manual
Recommendations
One easy way to handle this is to start valid soulmateId from 1. Take 0 as one invalid soulmateId.
Lead Judging Commences
finding-write-message-nft-0-id
Medium Severity, This has an indirect impact and influence on the possibility of divorce between soulmates owning the first soulmate NFT id0, leading to permanent loss of ability to earn airdrops/staking rewards.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.