Submission Details
Severity:
Anyone can mint the RamNFT in `mintRamNFT` function , as it has no check for who can mint the RamNFT
Summary
As we can clearly see below that the mint function doesn't have any check for who can mint the RamNFT
-->> function mintRamNFT(address to) public {
uint256 newTokenId = tokenCounter++;
_safeMint(to, newTokenId);
Characteristics[newTokenId] = CharacteristicsOfRam({
ram: to,
isJitaKrodhah: false,
isDhyutimaan: false,
isVidvaan: false,
isAatmavan: false,
isSatyavaakyah: false
});
}
Impact
Anyone can mint the RamNFT , which may cause loss to the protocol
Tools Used
Manual Review
Recommendations
Use the
onlyOragnisermodifier or theonlyChoosingRamContractHave some checks for who can mint the
RamNFT
Updates
Lead Judging Commences
bube over 1 year ago
Submission Judgement Published Reason: Too generic
Assigned finding tags:
mintRamNFT is public
Rewards breakdown
nSLOC
218This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.