Trick or Treat

First Flight #27
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: low
Invalid

No Time Limit for Resolving Tricks

Summary

There's no time limit for users to resolve pending "trick" purchases.

Vulnerability Details

Location: src/TrickOrTreat.sol:resolveTrick()

Impact

This could lead to long-term unresolved purchases, potentially complicating contract state management and user experience.

Tools Used

Recommendations

Implement a time limit after which pending purchases can be cancelled.

Updates

Appeal created

bube Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

[invalid] Unlimited pending NFTs

The protocol can work correctly with more than 20000 tokens in it. It is informational.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.