First Flight #13: Baba Marta

Summary

Anyone can call MartenitsaToken::updateCountMartenitsaTokensOwner function and update the count of martenistsaToken, which affect the collection of healthToken.

Vulnerability Details

MartenitsaToken::updateCountMartenitsaTokensOwner function allows anyone to update martenistsaToken count, so users can add count of martenitsaToken to them self or substract the count of other users. With more martenitsaToken users can collect infinite healthToken by calling MartenitsaMarketplace::collectReward function.

Impact

• Users can increase their own martenitsaToken balance to collect larger rewards.

• Users can decrease others' martenitsaToken balances to prevent them from collecting rewards.

Tools Used

Manual Review

Recommendations

Implement internal visibility for MartenitsaToken::updateCountMartenitsaTokensOwner function.