The constant LEGEND_SNEK_URI points to the wrong IPFS resource
Summary
The URI for the legendary NFT points to an image instead of JSON metadata.
Vulnerability Details
URIs for the first two NFTs are pointing to a JSON blob with metadata including another IPFS link to an image.
The URI for the third NFT (LEGEND_SNEK_URI) points to ipfs://QmRujARrkux8nsUG8BzXJa8TiDyz5sDJnVKDqrk3LLsKLX which is an image file, not JSON. Furthermore, it's the image of the RARE snake, not the LEGENDARY snake.
Impact
Low: Mixed URI data types would lead to integration problems with third-party protocols such as NFT marketplaces. Blockchain explorers which may be unable to display the NFTs correctly.
Tools Used
Manual code inspection.
Recommendations
Fix the link to point to the correct IPFS resource which holds the JSON metadata for the legendary snake.
Lead Judging Commences
LEGEND_SNEK_URI is wrong
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.