First Flight #13: Baba Marta

Beginner FriendlyFoundryGameFi
100 EXP
Submission Details
Severity: high
Valid

[H-2] Wrong accounting of `_collectedRewards` allows a user that holds 6 `martenitsaToken` to mint an indefinite amount of `HealthToken` via `MartenitsaMarketplace::collectReward` function.

Updates

Lead Judging Commences

bube Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

_collectedRewards is not updated correctly

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources