Submission Details
Severity:
`mintRamNFT` function is public and can be called by anyone
Summary
The function mintRamNFT is public and can be called by anyone. This function should be restricted to only the Dussehra contract.
Vulnerability Details
- function mintRamNFT(address to) public
+ function mintRamNFT(address to) public onlyOrganiser
Impact
Not restricting the function to be called by onlyOrganiser it will lead to anyone to be able to mint RamNFT
Tools Used
Manual review
Recommendations
Add onlyOrganiser to the function.
Updates
Lead Judging Commences
bube about 1 year ago
Submission Judgement Published Reason: Too generic
Assigned finding tags:
mintRamNFT is public
Rewards breakdown
nSLOC
218This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.