Submission Details
Severity:
_nextTokenId updation done prematurely
Summary
Variable _nextTokenId incremented before the current value is assigned to the token to be minted.
Vulnerability Details
uint256 tokenId = _nextTokenId++;
Impact
View function getDesign() will throw an error on the latest minted token, and view function getNextTokenId() will return the tokenId of the latest minted token instead of the next token, leading to erratic behaviour on integration.
Tools Used
Manual review
Recommendations
Update line 39 to two lines:
uint256 tokenId = _nextTokenId;
_nextTokenId++;
Rewards breakdown
nSLOC
239This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.