Submission Details
Severity:
Lack of Donation Receipt Validation in `GivingThanks.sol`
Description: No verification mechanism exists to ensure donations were actually received by charities.
Recommended Mitigation:
contract GivingThanks is ERC721URIStorage {
mapping(address => uint256) public charityDonations;
function donate(address charity) public payable {
// ... existing code ...
charityDonations[charity] += msg.value;
emit DonationReceived(charity, msg.value);
}
function verifyDonation(uint256 tokenId) public view returns (bool) {
// Verification logic
}
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.