First Flight #11: Snek-Raffle

Description

The link towards the Metadata for NFTs distributed by the Raffle is stored on-chain and is constant. However, the URI for the Legend Snek refers to the image of the Jungle Snek and not the correct JSON metadata for Legendary Snek.

Risk

Likelyhood: Medium

• Every Legend Snek NFT won't have the right metadata.

Impact: Medium

• Metadata will be corrupted and the NFT won't be displayed in wallets and marketplace properly. If it is displayed, it would show the image of the Jungle Snek instead of the legendary one.

• A new contract will have to be redeployed.

Proof of Concept

Check the IPFS link provided and verify that it is pointing to the image of Jungle Snek.

Recommended Mitigation

Replace the incorrect IPFS link with the correct one pointing to the JSON metadata for the Legend Snek.