Submission Details
Severity:
The function `tokenURI` will return URI for non-existent tokens.
Summary
The function tokenURI will return URI for non-existent tokens.
Vulnerability Details
The tokenURI function uses tokenIdToRarity mapping to identify the rarity of an NFT and return the corresponding URI for the token. However, the default value for mapping is 0, which equals COMMON rarity.
Impact
Medium
Tools Used
Manual analysis
Recommendations
Add the require check for the existence of NFT to tokenURI function.
Rewards breakdown
nSLOC
136This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.