Submission Details
Severity:
Uncontrolled Box Buying
Summary
The buyBox function allows users to buy boxes without limits. Users could buy an unlimited number of boxes, potentially leading to contract abuse or unintended economic consequences if too many boxes are sold at once.
Vulnerability Details
MysteryBox.sol/Line 38
Impact
Economic imbalance or abuse if too many boxes are purchased in a short period.
Tools Used
Foundry
Recommendations
Consider adding a limit on how many boxes a user can buy at once or rate-limiting box purchases.
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.