Submission Details
Severity:
NFT Token URI may not be unique, leading to different NFT tokens having the same URI
Summary
In GivingThanks::_createTokenURI, msg.sender, block.timestamp and msg.value are used to generate the token URI.
However, if the same sender have multiple doner transcations in the same block with the same amout, the minted NFT tokens will have the same URI.
Recommendations
Add tokenCounter as another parameter in GivingThanks::_createTokenURI to generate token URI to avoid token URI collision.
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.