Submission Details
Severity:
Anyone can change the registry
Summary
Anyone can change the registry. An attacker can change the registry to donate to himself to mint NFTs. Furthermore donations can also be blocked by changing to a a registry where no charity is verified.
Recommendations
Only allow "owner" to change the registry.
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.