First Flight #17: Dussehra

Summary

Vulnerability Details

The minRamNFT function in the RamNFT contract is declared as public, which allows unrestricted access to external parties, thus potentially anyone to call this function and mint Nft

Impact

The presence of the minRamNFT function as public can lead to the following consequences:

Unauthorized access: Malicious actors or external users may access and interact with the minRamNFT function, leading to unauthorized call functions
Security vulnerabilities: The exposure of the minRamNFT function to public access increases the likelihood of security vulnerabilities and potential exploitation by attackers.

Tools Used

Manual code review

Recommendations

Modify the minRamNFT function to be internal in the RamNFT contract to restrict access solely to internal contract interactions.