Submission Details
Severity:
Low-level call
Description: A low-level call is being used in the donate function, specifically the use of call when sending Ether to the charity address. While call is flexible and often necessary for sending Ether to external contracts, it’s considered low-level and should be used carefully due to potential security risks (like reentrancy attacks).
Mitigation: Use send or transfer Instead of call (if possible)
function donate(address charity) public payable {
require(registry.isVerified(charity), "Charity not verified");
(bool sent,) = charity.call{value: msg.value}("");
require(sent, "Failed to send Ether");
_mint(msg.sender, tokenCounter);
// Create metadata for the tokenURI
string memory uri = _createTokenURI(msg.sender, block.timestamp, msg.value);
_setTokenURI(tokenCounter, uri);
tokenCounter += 1;
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.