Submission Details
Severity:
collectReward() does not check that user has 3 different MartenitsaTokens
Summary
Function collectReward() rewards user 1 Health Token for every 3 MartenitsaTokens but does not check if they are different design.
Vulnerability Details
A user may be able to colletRewards with 3 similar MartenitsaTokens.
Impact
Health tokens are not distributed as intended making them less valuable.
Tools Used
Manual inspection
Recommendations
Function collectReward() must use getDesign() in a loop for each MartenitsaTokens to see how many different designs we have and then use that to distributeHealthToken().
Rewards breakdown
nSLOC
239This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.